CERT-BE says Belgian organisations compromised via SMS sign-in
CERT-BE says multiple Belgian organisations were compromised through SMS sign-in and advises disabling SMS as a first factor.
- Published
- Ecosystem
- Enterprise software
- Exploitation
- Not confirmed. CERT-BE’s headline says organisations were compromised, but the full advisory could not be reviewed.
What happened
CERT-BE says, in an advisory titled “Warning: Multiple Belgian organisations compromised through SMS sign-in, disable SMS as a first factor now!”, that several Belgian organisations were compromised through SMS sign-in (CERT-BE). The headline is dated 2026-11-10.
Only the headline could be retrieved, so the full article could not be reviewed. The severity rating on this page is provisional for that reason. The following are not confirmed:
- which organisations were affected
- how many were affected
- the technique used
- the attacker
- the impact
- any affected product or vendor
- any CVE
Am I affected?
Not confirmed. Going by CERT-BE’s headline alone, the warning concerns organisations that use SMS sign-in as a first factor. The headline does not say which services or products are involved, so the full advisory is needed to judge exposure.
What to do now
- Read the full CERT-BE advisory for the technical details and the exact scope of the recommendation: CERT-BE.
- Check whether any of your systems allow SMS as a first sign-in factor. CERT-BE’s headline recommends disabling it.
- Follow any further guidance CERT-BE publishes. This page will be updated if more detail becomes available.