CERT Polska
Warnings and incidents · Poland
Source digest
Latest publications from Polish and international security outlets and response teams: threat warnings, vulnerabilities, regulatory changes, campaigns abroad, technical analyses and guides. Every entry gives a title, a short summary and a link to the publisher’s full article.
Search titles and summaries, or narrow the digest to a single category, outlet or region. The numbers in brackets show how many entries remain once a value is selected.
Built from decades of threat intelligence research, the new resource explains scams from the victims' perspective and tracks emerging forms of cyber crime.
The incident, which involved a government contractor, has halted all production of bankruptcy notices.
Aby być zainfekowanym wystarczyło zobaczyć reklamę (nie trzeba było w nic klikać). Czasem reklama była ładowana “w tle”. W akcji był zaawansowany spyware celujący w odpowiednio wyselekcjonowane ofiary (nie były to masowe infekcje). Reklamy były emitowane na…
Don't buy the hype! AI has been dumbing down cyberattacks, and serious threat actors are barely touching it.
Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online - Built-in CODE Server app (richdocumentscode) for Nextcloud. [...]
A newly disclosed critical flaw in the Linux kernel allows code inside a virtual machine to read memory on the host computer it runs on. A researcher demonstrated the leak against Vercel's live cloud sandboxes, and Vercel confirmed it. The flaw, now tracked…
Google announced new AI-powered defenses against scam messages and call-forwarding abuse on Android, currently rolling out to eligible devices. [...]
Powerful zero-click spyware is infected devices worldwide through targeted ads, new research shows — an alarming development in the spread of surveillance technology.
Someone built a tool to steal data, then decided it should scare the victim for fun. Yes, that’s an actual feature. And somehow, it fits right in with this week's security stories. The rest gets interesting in different ways. A small permission can lead to a…
A proxyjacking campaign has impacted devices in 34 countries, monetizing victims' internet connections through a commercial residential proxy network. [...]
Page 7 of 60 · 599 entries in the archive
Entries stay here even after they drop out of the publishers’ RSS feeds. The links point to the originals — if a publisher removes an article, its link stops working.
Where the entries come from
Warnings and incidents · Poland
Everyday security · Poland
Analyses and investigations · Poland
Technique and vulnerabilities · Poland
Policy and regulation · Poland
Threats to business · Poland
Campaigns and vulnerabilities · World
Incidents and malware · World
Investigative journalism · World
Cyber conflict and states · World
Industry analysis · World
Enterprise security · World
Cryptography and policy · World
EvidSec does not publish these materials and does not store their content. We show only the title, a short summary taken from the publisher’s RSS feed and a link to the original article. All rights belong to their authors and publishers.
The “Machine translation” link opens the publisher’s article through an external machine-translation service. The text is translated automatically, so errors, distortions and wrong terminology are possible — the original version always prevails. EvidSec does not translate these texts itself and does not store their content.