Security News > 2023 > July > Norwegian government IT systems hacked using zero-day flaw
The Norwegian government is warning that its ICT platform used by 12 ministries has suffered a cyberattack after hackers exploited a zero-day vulnerability in third-party software.
The Norwegian Security and Service Organization informed the National Security Authority when the cyberattack was discovered and engaged the police, who are currently investigating the incident.
The Norwegian Data Protection Authority has also been notified about the cyberattack, indicating that the hackers might have accessed and/or exfiltrated sensitive data from the ICT system, leading to a data breach.
"DSS has initiated a number of security measures to protect the information on the affected ICT platform."
DSS's director general, Erik Hope, stated that the hackers breached the ICT platform through a zero-day vulnerability in an application used by the government.
The flaw has now been fixed, and the agency has implemented additional security measures like restricting remote access via mobile devices for ministry employees to DSS's ICT platform.