CERT Polska
Warnings and incidents · Poland
Source digest
Cybersecurity — Poland and the world
Latest publications from Polish and international security outlets and response teams: threat warnings, vulnerabilities, regulatory changes, campaigns abroad, technical analyses and guides. Every entry gives a title, a short summary and a link to the publisher’s full article.
Search titles and summaries, or narrow the digest to a single category, outlet or region. The numbers in brackets show how many entries remain once a value is selected.
-
Ivanti ICS Zero-Day Attacks Highlight Vendor Patching Hurdles
CVE-2026-104935, a high-severity authentication bypass + RCE vulnerability, was only partially discovered and patched in July, leaving an opening for threat actors to capitalize on.
-
The Record World Cyber conflict and states 4 days ago
North Macedonian police arrest alleged administrator behind OLVX cybercrime market
A raid on a home in a North Macedonian village led to the arrest of the suspected administrator of the OLVX market, according to the Balkan country's Interior Ministry along with the FBI.
-
Yam Store: The Phishing Network Behind a Billion Messages
A sprawling cybercrime marketplace supplied cloud infrastructure and phishing kits that helped fuel more than 1 billion phishing messages worldwide.
-
Brooklyn DA’s office disrupts crypto scam targeting Russian community
Russian-speaking Brooklyn residents began tipping off local authorities to a cryptocurrency fraud scheme three years ago, leading to an operation to take down the associated servers and domains.
-
Anthropic 'SneakPeek' Flaw Is a Silent Zero-Click Threat
A bug in Claude Code Desktop's preview pane can allow adversaries to quietly steal credentials from developers, including SSH private keys, AWS credentials, and Claude 0Auth tokens.
-
BleepingComputer World Incidents and malware 4 days ago
FBI raids DPRK IT worker laptop farms in Texas, US nationals arrested
The U.S. Department of Justice (DoJ) has disrupted the Famous Chollima threat group's operations by arresting two suspects, charging 14 individuals, and seizing nearly 187 laptops used in North Korean remote IT worker schemes. [...]
-
Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability
Attackers are exploiting a critical flaw in Cisco Secure Email Gateway that lets a sender with no login write files to the appliance's operating system, Cisco said in an advisory on Wednesday. The attacker sends an email with a crafted attachment through the…
-
BleepingComputer World Incidents and malware 4 days ago
Ledger asks sellers across Asia to halt sales after supply-chain attack
Ledger has asked resellers and distributors of its wallets in Indonesia, Singapore, Thailand, the Philippines, Vietnam, Malaysia, and Hong Kong to suspend device sales and remove products from shelves while it investigates device tampering. [...]
-
Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App
Attackers exploited a flaw in an optional Nextcloud app, Collabora Online - Built-in CODE Server, to plant web shells on Nextcloud servers. Three administrators reported the issue on GitHub, with the first logged attack on September 10. A web shell is a small…
-
Cisco patches new Secure Email Gateway zero-day exploited in attacks
Cisco has patched another actively exploited zero-day flaw in its Secure Email Gateway (SEG) that lets remote unauthenticated attackers execute commands with root privileges. [...]
Page 13 of 60 · 599 entries in the archive
Entries stay here even after they drop out of the publishers’ RSS feeds. The links point to the originals — if a publisher removes an article, its link stops working.
Where the entries come from
Tracked sources
Niebezpiecznik
Everyday security · Poland
Zaufana Trzecia Strona
Analyses and investigations · Poland
Sekurak
Technique and vulnerabilities · Poland
CyberDefence24
Policy and regulation · Poland
Kapitan Hack
Threats to business · Poland
The Hacker News
Campaigns and vulnerabilities · World
BleepingComputer
Incidents and malware · World
Krebs on Security
Investigative journalism · World
The Record
Cyber conflict and states · World
Dark Reading
Industry analysis · World
SecurityWeek
Enterprise security · World
Schneier on Security
Cryptography and policy · World
EvidSec does not publish these materials and does not store their content. We show only the title, a short summary taken from the publisher’s RSS feed and a link to the original article. All rights belong to their authors and publishers.
The “Machine translation” link opens the publisher’s article through an external machine-translation service. The text is translated automatically, so errors, distortions and wrong terminology are possible — the original version always prevails. EvidSec does not translate these texts itself and does not store their content.