Norwegian government IT systems hacked using zero-day flaw
The Norwegian Data Protection Authority has also been notified about the cyberattack, indicating that the hackers might have accessed and/or exfiltrated sensitive data from the ICT system, leading to a data breach.
Despite the compromised platform's critical role in the government's daily operations, the recent cyberattack will not necessitate a halt in work activities.
"DSS has initiated a number of security measures to protect the information on the affected ICT platform."
"DSS has set up a crisis team, and is investigating and handling the incident with assistance from the National Security Authority (NSM) and other security experts."
DSS's director general, Erik Hope, stated that the hackers breached the ICT platform through a zero-day vulnerability in an application used by the government.
The flaw has now been fixed, and the agency has implemented additional security measures like restricting remote access via mobile devices for ministry employees to DSS's ICT platform.
Unfortunately, DSS has not provided any details about the vulnerable software, so it is unclear if this concerns a novel attack wave that might also impact organizations in other countries.
Really significant and timely topic shared here. The reported compromise of Norwegian government IT systems through a zero-day vulnerability highlights the growing cybersecurity challenges facing public institutions and critical infrastructure. It underscores the importance of proactive risk assessment, rapid incident response, and continuous investment in digital resilience to protect sensitive information and maintain public trust. This development also illustrates how cybersecurity has become a core component of national security strategy in an increasingly interconnected world. The subject aligns closely with discussions in a national security policy seminar & course for executives in Oslo, Norway, where professionals examine cyber threats, risk governance, crisis preparedness, and policy frameworks designed to strengthen national resilience against emerging security challenges.