Tag

Cert Polska

All articles tagged with #cert polska

cybersecurity1 month ago•1 min saved

MikroTik RouterOS Zero-Day Exploited in 'MikroTrick' Attack Chain

Attackers are actively exploiting a chain of vulnerabilities in MikroTik RouterOS to gain full administrative control without authentication. CERT Polska named the exploit 'MikroTrick,' combining an SSH authentication bypass and a privilege escalation flaw. Successful attacks were observed as early as September 2, 2026, before official patches were released. MikroTik has issued updates for affected versions, urging users to patch immediately and inspect devices for signs of compromise.

via The Hacker News|

#cert-polska #cybersecurity #mikrotik

cybersecurity1 month ago•1 min saved

CISA Mandates Urgent Patching of Exploited Zimbra SNMP Flaw

CISA has ordered U.S. federal agencies to patch CVE-2026-73570, a command injection vulnerability in Zimbra Collaboration Suite, within three days. The flaw, which allows unauthenticated remote code execution via the SNMP component, is being actively exploited in the wild. CERT Polska first identified the attacks, and Shadowserver reports over 270 compromised instances globally, with the U.S. leading in affected systems.

via BleepingComputer|

#cert-polska #cisa #cve-2026-73570

cybersecurity2 months ago•1 min saved

Zimbra SNMP Flaw CVE-2026-73570 Faces Active Exploitation, CISA Mandates Patching

CERT Polska confirmed active exploitation of CVE-2026-73570, a critical command injection flaw in Zimbra Collaboration Suite. The vulnerability allows unauthenticated remote code execution via the SNMP component. CISA added the flaw to its Known Exploited Vulnerabilities catalog, requiring federal agencies to patch by August 24, 2026. Shadowserver reports 267 compromised instances, with the US leading the count.

via BleepingComputer|

#cert-polska #cisa #cve-2026-73570

technology8 months ago•3 min saved

Coordinated Wiper Attacks Hit 30+ Renewable Farms, Sparking Grid Security Concerns

CERT Polska disclosed a coordinated, destructive cyber campaign on Dec 29, 2025 that hit more than 30 wind/solar farms and a CHP plant, disrupting substation communications but not stopping electricity or heat delivery. The attackers deployed wipers (DynoWiper, LazyWiper) via compromised Fortinet devices and Active Directory, used multiple accounts with no two-factor authentication, and leveraged Tor/IPs to access energy networks, with several variants and likely LLM involvement; data was also exfiltrated from OT/cloud services. Attribution to Static Tundra tied to Russia's FSB is stated by CERT Polska, though some researchers link activity to Sandworm.

via The Hacker News|

#cert-polska #cyberattack #dynowiper