CERT Polska
Warnings and incidents · Poland
Source digest
Cybersecurity — Poland and the world
Latest publications from Polish and international security outlets and response teams: threat warnings, vulnerabilities, regulatory changes, campaigns abroad, technical analyses and guides. Every entry gives a title, a short summary and a link to the publisher’s full article.
Search titles and summaries, or narrow the digest to a single category, outlet or region. The numbers in brackets show how many entries remain once a value is selected.
-
8.8 Million Impacted by Data Breach at Denmark’s Central Person Register
Hackers abused a company’s lawful access to the CPR system to steal the personal information of registered citizens. The post 8.8 Million Impacted by Data Breach at Denmark’s Central Person Register appeared first on SecurityWeek.
-
Nikkei discloses breaches of employees’ Microsoft, Google email accounts
Over the weekend, Japanese publishing giant Nikkei disclosed that unknown attackers recently breached two employee email accounts and used one to send thousands of phishing emails. [...]
-
Google Pauses OSS Product Bug Bounty Rewards After Surge in Invalid Automated Reports
Google has stopped accepting product vulnerability reports through its bug bounty program for its open-source software. The change, in effect since October 1, means researchers can no longer submit security flaws in the code of projects such as Go, Angular…
-
CyberDefence24 Poland Policy and regulation 13 days ago
Kongres MŚP dwa razy większy. Dolnośląscy przedsiębiorcy spotkają się 8 października
Dolny Śląsk ponownie stanie się stolicą małej i średniej przedsiębiorczości. 8 października w Q Hotel Plus Wrocław Bielany odbędzie się II edycja Kongresu MŚP organizowanego przez Dolnośląski Fundusz Rozwoju. Organizatorzy spodziewają się blisko 1000…
-
Podatność XSS w komentarzach WordPress mogła prowadzić do RCE
Badacz bezpieczeństwa Rafie Muhammad odkrył podatność XSS mogącą eskalować do RCE w systemie komentarzy WordPress. Dowolny nieuwierzytelniony użytkownik mógł dodać komentarz, który umieszczał na stronie ukryty skrypt. Jeśli stronę tę otworzył administrator…
-
SecurityWeek World Enterprise security 13 days ago
Social Engineering Detection Moves Into the Live Conversation
Companies are pouring time and dollars into security awareness training, but little evidence shows it actually works against social engineering. The post Social Engineering Detection Moves Into the Live Conversation appeared first on SecurityWeek.
-
Engineer sentenced for locking over 3,000 devices on employer network
A former core infrastructure engineer at an industrial company headquartered in New Jersey was sentenced to 32 months in prison for locking thousands of devices on his employer's network in a ransomware-style attack. [...]
-
Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products
A critical flaw in 8 Atlassian Data Center products, which customers host themselves, allows an attacker with no login access to read specific files in each product's web application root directory. The attacker must already know a file's exact name and path…
-
FBI Removes Accenture Contractor After Patch Failure Led to ShinyHunters Breach
The U.S. Federal Bureau of Investigation (FBI) has removed an Accenture contractor for their alleged role in a ShinyHunters-breach that led to the theft of personal details of thousands of bureau employees. That's according to a report from Reuters, citing…
-
Wyciek danych z Fakturowni. Zgłoszenia do UODO i francuski wątek
Na przełomie września i października br. usłyszeliśmy o wycieku danych z portalu „Fakturownia.pl”. Za atakiem stoi ta sama grupa (bądź osoba), co w przypadku kradzieży informacji z MyDr czy Medyc, używająca pseudonimu „Fingerprint”. Incydent ma obejmować…
Page 51 of 60 · 599 entries in the archive
Entries stay here even after they drop out of the publishers’ RSS feeds. The links point to the originals — if a publisher removes an article, its link stops working.
Where the entries come from
Tracked sources
Niebezpiecznik
Everyday security · Poland
Zaufana Trzecia Strona
Analyses and investigations · Poland
Sekurak
Technique and vulnerabilities · Poland
CyberDefence24
Policy and regulation · Poland
Kapitan Hack
Threats to business · Poland
The Hacker News
Campaigns and vulnerabilities · World
BleepingComputer
Incidents and malware · World
Krebs on Security
Investigative journalism · World
The Record
Cyber conflict and states · World
Dark Reading
Industry analysis · World
SecurityWeek
Enterprise security · World
Schneier on Security
Cryptography and policy · World
EvidSec does not publish these materials and does not store their content. We show only the title, a short summary taken from the publisher’s RSS feed and a link to the original article. All rights belong to their authors and publishers.
The “Machine translation” link opens the publisher’s article through an external machine-translation service. The text is translated automatically, so errors, distortions and wrong terminology are possible — the original version always prevails. EvidSec does not translate these texts itself and does not store their content.