Lidl Notified Online Shop Customers in Germany, Belgium, and the Netherlands of a Data Breach

Multiple security incidents and alerts: Lidl notified online-shop customers in Germany, Belgium and the Netherlands that personal data was stolen in a breach of a third‑party IT provider (payment data not exposed). CISA added Cisco IOS flaw CVE-2008-4128 to its Known Exploited Vulnerabilities catalog and also added other CMS-related flaws (iCagenda, Balbooa Forms) to KEV. Australia warned of a large-scale campaign actively exploiting CMS vulnerabilities (WordPress, Joomla, etc.) to deploy webshells. Dutch police link local suspects to the Odido breach that exposed data on ~6 million customers;