We describe the technical details of the MikroTrick chain, which combines the CVE-2026-67279 and CVE-2026-86060 ...

Another year of CERT Polska’s activities is behind us. It was a special one, as it marked the end of the third decade of our operations – we are celebrating our 30th anniversary! The year 2025 was a ...

CERT Polska has received a report about vulnerabilities in KAON PG5298A/PG5298B routers and participated in coordination of their disclosure. The vulnerability CVE-2025-63080: Firmware in KAON PG5298A ...

CERT Polska has received a report about vulnerability in 4real ThemisNETPanel software and participated in coordination of its disclosure. The vulnerability CVE-2026-6847: Remote Code Execution ...

This was a first cyberattack against Poland's energy sector in which the objective was purely destructive. It also proved to be considerably more complex than initially believed, involving an ...

CERT Polska has analyzed an android malware sample distributed through infrastructure impersonating Booking.com. We refer to it as cifrat (a name derived from the the io.cifnzm.utility67pu package ...

On 29 December 2025, in the morning and afternoon hours, coordinated attacks took place in Polish cyberspace. They were directed at more than 30 wind and photovoltaic farms, a private company from the ...

CERT Polska has received a report about vulnerabilities in ATutor software and participated in coordination of their disclosure. The vulnerability CVE-2026-64961: ATutor is vulnerable to ...

The CERT Polska team has identified and coordinated the disclosure of six vulnerabilities in MikroTik RouterOS. Combining two of them allows an attacker to take full control of the device without ...

Za nami kolejny rok działania zespołu CERT Polska. Był on wyjątkowy, ponieważ wieńczył trzecią dekadę naszej działalności – świętujemy właśnie 30. urodziny! Rok 2025 to czas pełen wyzwań, rozwoju i ...

CERT Polska has received a report about vulnerability in OutSystems Service Center software and participated in coordination of its disclosure. The vulnerability CVE-2026-40126: OutSystems Service ...

CERT Polska has received a report about vulnerabilities in Sparx Systems software and participated in coordination of their disclosure. The vulnerability CVE-2026-42096: Sparx Pro Cloud Server is ...