Source digest
Cybersecurity — Poland and the world
Latest publications from Polish and international security outlets and response teams: threat warnings, vulnerabilities, regulatory changes, campaigns abroad, technical analyses and guides. Every entry gives a title, a short summary and a link to the publisher’s full article.
Search titles and summaries, or narrow the digest to a single category, outlet or region. The numbers in brackets show how many entries remain once a value is selected.
Security notice 31.08.2026
Medical data breach at MyDr — check whether it affects you as well
In August 2026 attackers stole data from MyDr, the medical records system used by thousands of Polish clinics and doctors’ offices. The criminals claim to hold 2.5 TB of files and more than 18 million PESEL numbers together with names, dates of birth, phone numbers and entries about issued prescriptions. The break-in has been confirmed: the case is handled by the Polish cybercrime bureau (CBZC) under the supervision of the Warsaw District Prosecutor’s Office, and the data protection authority (UODO) has opened an inspection at the company.
The controller of your data is the clinic or the practice, not the software vendor — the clinic has to notify the patient and answers for the breach. For you this mainly means a higher risk of phishing and of someone taking out a loan in your name. A PESEL number cannot be changed, but it can be blocked — in the mObywatel app, at a bank or at a municipal office.
Where to check whether your data leaked
Use two independent search services: one run by the Polish government, one international. A PESEL number, an e-mail address or a phone number is enough. Neither of them is operated by EvidLock.
-
Bezpieczne Dane
bezpiecznedane.gov.pl
The official Polish government service, run by the Ministry of Digital Affairs together with the CERT Polska team (NASK). After signing in you can check whether your PESEL number is in the MyDr breach; the search also covers e-mail addresses, logins and phone numbers from other known breaches.
-
Have I Been Pwned
haveibeenpwned.com
The best known international breach database. Enter your e-mail address and you immediately see which known breaches it appears in — no account needed. Phone numbers can be checked in the government service above.
Read the full article on the MyDr breach and its consequences — Zaufana Trzecia Strona →
EvidLock has no access to the data covered by this breach and does not process it. The notice is informational and the links lead to external services.
Event of the month
The Record World
2 days ago
Anne Arundel County, Maryland, said an intruder stole files from government systems, and investigators are working to assess how much data was exposed.
The loudest incident of recent weeks — a major attack, a data breach or a serious outage.
-
Attackers are targeting an OS command injection vulnerability in SiteGuard Server Edition that lets them execute commands as root or SYSTEM on affected servers. [...]
-
CyberDefence24
Poland
Policy and regulation 4 h ago
Roboty już dziś sprzątają nasze mieszkania, pracują w fabrykach i coraz lepiej naśladują ludzkie zachowania. W przyszłości mogą nie tylko wyręczać nas w codziennych obowiązkach – mogą też być naszymi towarzyszami. Czy jesteśmy jednak gotowi powierzyć im swoje…
-
CyberSN’s Cybersecurity Jobs Report provides visibility into the US cybersecurity job market. It’s a mixed bag. The post US Cybersecurity Job Postings Fall 26% as AI Security Engineer Demand Soars appeared first on SecurityWeek.
-
ConnectWise on Saturday said it has disabled seven ConnectWise application identities as it continues its investigation into an incident in which unknown threat actors obtained unauthorized access to the application identities and compromised Microsoft 365…
-
Najpierw drony w polskiej przestrzeni powietrznej, potem rosyjski pocisk na Lubelszczyźnie. Następnie raport CIA, który — zależnie od rozmówcy — był dokumentem, informacją albo briefingiem. Do tego niejasny przekaz o rozmowie wicepremiera i ministra obrony z…
-
ConnectWise has shut down customer access to its Cloud Backup service (formerly SkyKick Cloud Backup) after hackers accessed application identities and compromised Microsoft 365 tenants. [...]
-
Drupal has patched two critical vulnerabilities that could allow attackers to execute code remotely on websites running any supported version of the content management system. [...]
-
Nowelizacja ustawy o krajowym systemie cyberbezpieczeństwa przenosi odpowiedzialność za ochronę systemów i danych bezpośrednio na kierowników jednostek. Dyrektorzy zarządów dróg i oddziałów muszą nie tylko zadbać o odpowiednie zabezpieczenia, ale także…
-
The Hacker News
World
Campaigns and vulnerabilities Malware
1 day ago
Cybersecurity researchers have discovered a malicious npm package that's part of a recently disclosed software supply chain attack campaign dubbed MALFEX. The package, named "imgdecode," was uploaded to the package registry on September 30, 2026, by a user…
-
SecurityWeek
World
Enterprise security Malware
1 day ago
Israeli company Discover-Tech’s ads allow threat actors to fingerprint and track devices at scale and infect selected targets. The post Israeli Ad Firm Doubled as Candiru’s Zero-Click Spyware Delivery Channel appeared first on SecurityWeek.
Entries stay here even after they drop out of the publishers’ RSS feeds. The links point to the originals — if a publisher removes an article, its link stops working.