LinkedIn Carousel - #CyberWeekly Week 25

On the Map

Europe mapped Belgium's CyFun straight onto NIS2. Plus a free MSP playbook and a perfect-10 Joomla bug to patch today.

Europe maps CyFun onto NIS2

Platform: a free MSP playbook for recurring revenue

CCB patch watch: a perfect-10 Joomla bug

Easy Cyber Protection

1/3

Europe just put Belgium’s CyFun on the official NIS2 map

The NIS Cooperation Group, the European Union body that coordinates the NIS2 cybersecurity law across member states, published a reference document this week…

What it is: a common European reading of the NIS2 security measures, tied to EU Implementing Regulation 2024/2690, with a mapping table so a requirement written in one framework can be found in the others. It was published on 17 June
Why CyFun matters here: CyFun is the official cybersecurity baseline from the Centre for Cybersecurity Belgium (CCB). This document means doing CyFun now demonstrably equals doing NIS2 in terms Europe itself recognises, not a local shortcut, a mapped equivalent
The practical read for SMEs: if your information technology (IT) partner gets you CyFun-ready, you are no longer guessing whether that satisfies NIS2. The EU's own table draws the line for you

Centre for Cybersecurity Belgium (17 June 2026) → https://ccb.belgium.be/news/new-european-guidance-document-helps-organisations-nis2-security-measures

2/3

Platform Spotlight: a free book on turning NIS2 into recurring revenue

Most managed service providers (MSPs) skip compliance because they assume it means hiring an expert. It doesn't. We wrote a full guide that shows how to offer…

What's inside: the pricing model, objection scripts for the "we're too small for this" conversation, a client scoping form, and a 90-day rollout plan. A complete playbook, not a teaser
The honest part: it shows your client exactly what they must do to comply first, the controls, the scoring, the official CCB tools, then how you deliver that as a service. The upgrades are required by the government's cyber agency, not invented by you
The proof: how one of our client MSPs used an intern and our platform to complete 31 of 34 CyFun controls in eight days, with no prior compliance experience

Grab the free kit → https://easycyberprotection.com/learn/guides/nis2-compliance-for-msps/

3/3

CCB patch watch: a perfect-10 Joomla bug your website might be running

The Centre for Cybersecurity Belgium (CCB) had a heavy week, and the headline is a maximum-severity flaw in a popular Joomla add-on that attackers are already hunting for at scale.

Joomla Content Editor (JCE): CVE-2026-48907, severity 10.0 out of 10. On vulnerable versions (2.9.99.4 and earlier) an unauthenticated attacker can upload and run their own code, which means full takeover of the website. CCB flagged it on 17 June and warned that public exploit code and automated mass-scanning are already in the wild. If your site runs Joomla, check the JCE version today
Cisco Catalyst SD-WAN Manager: actively exploited. CCB warned on 16 June, and the flaw is on the United States' exploited-vulnerabilities list with a 29 June federal fix-by date. This is core managed-network equipment, an MSP-stack item as much as a client one, so patch your own house too
Oracle PeopleSoft: critical, actively exploited. CCB issued a "patch immediately" on 12 June for a remote code execution flaw. Niche for most SMEs, but if you run PeopleSoft for human resources or finance, treat it as urgent

Centre for Cybersecurity Belgium advisories → https://ccb.belgium.be/advisories

Read the full issue

3 stories. Context that matters.
Belgian cybersecurity, weekly.

Scan to read online

https://easycyberprotection.com/cyberweekly/2026/week-25

Follow #CyberWeekly

easycyberprotection.com