CERT Polska
Warnings and incidents · Poland
Source digest
Cybersecurity — Poland and the world
Latest publications from Polish and international security outlets and response teams: threat warnings, vulnerabilities, regulatory changes, campaigns abroad, technical analyses and guides. Every entry gives a title, a short summary and a link to the publisher’s full article.
Search titles and summaries, or narrow the digest to a single category, outlet or region. The numbers in brackets show how many entries remain once a value is selected.
-
Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products
A critical flaw in 8 Atlassian Data Center products, which customers host themselves, allows an attacker with no login access to read specific files in each product's web application root directory. The attacker must already know a file's exact name and path…
-
FBI Removes Accenture Contractor After Patch Failure Led to ShinyHunters Breach
The U.S. Federal Bureau of Investigation (FBI) has removed an Accenture contractor for their alleged role in a ShinyHunters-breach that led to the theft of personal details of thousands of bureau employees. That's according to a report from Reuters, citing…
-
Wyciek danych z Fakturowni. Zgłoszenia do UODO i francuski wątek
Na przełomie września i października br. usłyszeliśmy o wycieku danych z portalu „Fakturownia.pl”. Za atakiem stoi ta sama grupa (bądź osoba), co w przypadku kradzieży informacji z MyDr czy Medyc, używająca pseudonimu „Fingerprint”. Incydent ma obejmować…
-
The Hacker News World Campaigns and vulnerabilities 14 days ago
Denmark Says Attackers Accessed CPR Data for 8.8 Million People via Company Account
Unauthorized parties have gained access to the names, addresses, and personal identification numbers of about 8.8 million people, living and dead, in Denmark's national population register, the country's digitalization ministry said on October 5. They used a…
-
ClickFix Smuggles Payloads Through Browser Cache to Bypass Windows Run Limits
A new type of ClickFix attack is using compromised websites to trick users into executing a malicious payload cached in a web browser's cache. "Instead of downloading and executing remote payloads like the typical attack pattern, in this attack, the websites…
-
Blue Locker powraca. Ransomware zaatakował pakistański sektor energetyczny
Blue Locker to rodzina ransomware, która po kilku latach względnej ciszy ponownie znalazła się w centrum zainteresowania badaczy bezpieczeństwa. Malware został po raz pierwszy zaobserwowany pod koniec 2021 roku, jednak głośniej zrobiło się o nim dopiero po…
-
The Record World Cyber conflict and states 14 days ago
Shares in British clothing company ASOS dive after hackers apparently send push notification
Several mysteries surround what appeared to be an unauthorized push notification sent to customers of London-based clothing company ASOS.
-
OpenAI is adding invisible watermarks to ChatGPT and Codex text in the EU
OpenAI is preparing to add invisible watermarks to text generated by ChatGPT and Codex in the European Union. [...]
-
Wikimedia Foundation: OpenAI agents tried to edit pages and compromise notes tool
Beyond the potential misuses of its services, Wikimedia said activity by AI agents can be a drain on web platforms that are already operating with limited resources.
-
ClingSTUN Turns Vulnerable IoT Devices Into Proxy Nodes
The Linux backdoor exploits 24 known flaws to compromise IoT devices and uses legitimate public STUN servers to obscure communications.
Page 56 of 60 · 599 entries in the archive
Entries stay here even after they drop out of the publishers’ RSS feeds. The links point to the originals — if a publisher removes an article, its link stops working.
Where the entries come from
Tracked sources
Niebezpiecznik
Everyday security · Poland
Zaufana Trzecia Strona
Analyses and investigations · Poland
Sekurak
Technique and vulnerabilities · Poland
CyberDefence24
Policy and regulation · Poland
Kapitan Hack
Threats to business · Poland
The Hacker News
Campaigns and vulnerabilities · World
BleepingComputer
Incidents and malware · World
Krebs on Security
Investigative journalism · World
The Record
Cyber conflict and states · World
Dark Reading
Industry analysis · World
SecurityWeek
Enterprise security · World
Schneier on Security
Cryptography and policy · World
EvidSec does not publish these materials and does not store their content. We show only the title, a short summary taken from the publisher’s RSS feed and a link to the original article. All rights belong to their authors and publishers.
The “Machine translation” link opens the publisher’s article through an external machine-translation service. The text is translated automatically, so errors, distortions and wrong terminology are possible — the original version always prevails. EvidSec does not translate these texts itself and does not store their content.