Book a meeting

› 17:00:00 CERT.PL — Follow-Up Report of the December 2025 Energy Sector Incident · › 14:02:31 CCB — VM Escape Vulnerabilities in KVM · › 11:39:25 NCSC-NL CVE-2026-65400 macOS Screen Sharing door Apple · › 11:26:06 BSI CVE-2026-4046 GNU libc: Schwachstelle ermöglicht Denial of Service · › 11:26:06 BSI CVE-2026-4437 GNU libc: Mehrere Schwachstellen ermöglichen Manipulation von DNS Ant… · › 11:26:06 BSI CVE-2025-71200 Linux Kernel: Mehrere Schwachstellen · › 11:26:05 BSI CVE-2018-1000204 Linux Kernel: Mehrere Schwachstellen · › 11:21:05 BSI CVE-2026-5435 GNU libc: Mehrere Schwachstellen · › 11:21:05 BSI CVE-2026-5358 GNU libc: Mehrere Schwachstellen · › 11:16:05 BSI CVE-2025-43325 Apple macOS (Tahoe, Sonoma und Sequoia): Mehrere Schwachstellen · › 10:51:06 BSI CVE-2025-49506 Apache Portable Runtime (APR): Mehrere Schwachstellen · › 10:51:06 BSI CVE-2026-7405 Autodesk AutoCAD und Civil 3D: Mehrere Schwachstellen ·

← Back to console

Medium CERT.PL · NASK

Follow-Up Report of the December 2025 Energy Sector Incident

Published 08 August 2026 at 17:00

Description

During the attacks against Poland's energy sector in late 2025, a second combined heat and power plant was also affected. We are publishing a report detailing an investigation that lasted more than three months and led to the discovery of a previously unobserved attack vector involving a private APN.