Chief Technology Officer at SecurHub.pl

PhD candidate in neuroscience. Psychologist and IT expert specializing in cybersecurity.

Visit Website

78 articles

by Aleksander Zębrowski

Other Articles

Hunting Architecture: How to Build a Modern SOC That Doesn’t Just Look, But Sees (Extended Version)

A comprehensive guide to SIEM transformation. From data normalization, through the "Pyramid of Pain", to analyst psychology. Learn how to go beyond simple signatures and start detecting behaviors.

18:26 02.01.202612 min

mObywatel and Facade Transparency

The release of the mObywatel source code was supposed to be a celebration of transparency. Instead, we got a lesson in "malicious compliance," right-click blockers, and proof that the Polish administration still confuses security with secrecy.

17:43 31.12.20259 min

2025 Zero-Day Report: What the Record Number of Chrome Flaws Says About Your Corporate Security

Eight critical vulnerabilities in a single year. We analyze how sophisticated APT groups exploit the V8 engine and why traditional sandboxing is no longer enough in 2025.

13:01 23.12.20257 min

WormGPT and KawaiiGPT: 5 Facts About the Dark Side of AI You Need to Know

Artificial intelligence is not just about medicine and productivity. It also involves specialized, malicious LLMs that democratize cybercrime and create perfect scams.

20:21 22.12.20259 min

6 Surprising Truths About Industrial Cybersecurity You Need to Know

The reality of Industry 4.0 marks the end of factory isolation. Discover how the IEC 62443 standard turns traditional thinking about critical infrastructure protection upside down.

18:21 22.12.202510 min

When AI Hits the Couch: What LLMs Really "Think" About Their Creators

Can artificial intelligence experience trauma? We explore the fascinating and disturbing results of an experiment where algorithms underwent therapy sessions. The result? Synthetic psychopathology.

10:42 19.12.202511 min

What Are We Really Doing With AI? 5 Surprising Truths From 100 Trillion Token Analysis

An analysis of 100 trillion tokens debunks myths about artificial intelligence. It turns out that instead of office productivity, roleplay reigns supreme, and users bond with models like in the Cinderella fairy tale.

16:24 16.12.202513 min

RAM worth its weight in gold: 5 hidden causes of the 2025 market storm

Upgrading a PC in 2025 is a financial nightmare. Why have RAM prices skyrocketed? It is not just AI. We uncover the physics of silicon, Samsung strategy, and the end of Windows 10.

19:50 15.12.202511 min

Echoes of React2Shell: Pandora’s Box Has Been Opened

Thought the CVSS 10.0 patch ended the story? Wrong. When the spotlight hit React Server Components, researchers found more. We analyze the "aftershocks" in the Next.js ecosystem.

18:06 13.12.20257 min

One Address to Rule (Cyber)Security. What You Should Know About the New cyber.gov.pl Portal

Polish cyber defense is a system with two faces. On one side, there is the new cyber.gov.pl website, and on the other – the official acknowledgment of possessing offensive cyber weapons. We explore how this duality works.

12:21 13.12.202511 min

Buying an apartment and losing your identity? What the Dom Development data breach teaches us

The high-profile cyberattack on one of Poland's largest developers is more than just another leak. It's a story of how your entire family's data, from PESEL numbers to salaries, could have fallen into the wrong hands. We analyze what this means and how to protect yourself.

16:21 11.12.202517 min

Poland Goes to War on Disinformation. And Is Pouring Record-Breaking Money Into It

In 2026, Poland plans to allocate record-breaking funds to combat disinformation. We analyze what lies behind the government's ambitious plans, from large-scale social campaigns to the defense of the key cybersecurity agency, NASK.

15:22 11.12.202512 min

Careless Whisper: Your delivery receipts in WhatsApp and Signal reveal your location and activity

Researchers have discovered a new attack vector on WhatsApp and Signal users. By exploiting the message delivery receipt mechanism, attackers can track screen activity, location, and even drain the victim's battery — without their knowledge.

09.12.20259 min

In-depth analysis of Tor changes: CGO, or how 2025 cryptography crushes 2002 standards

The Tor Project is implementing Counter Galois Onion (CGO). This is not just a patch, it is a fundamental change in encryption architecture. We explain why the old AES-CTR had to go, how CGO achieves a 3x performance boost at endpoints, and why tagging attacks are becoming mathematically impossible.

09.12.20257 min

Security Operations Center (SOC): A Comprehensive Guide for 2026 | Building and Implementation

Learn everything about the Security Operations Center (SOC) - from team building, through SIEM/XDR/SOAR technologies, NIS2 requirements, and deployment models, to the future with AI. A practical guide for CISOs and IT managers.

07.12.202549 min

React2Shell and the race against time. Vercel patches critical Next.js vulnerability

Got a Next.js app? Put down your coffee and check your version. CVE-2025-55182, charmingly dubbed "React2Shell", allows for remote code execution. Vercel released patches, updated WAF, and is offering big bounties for bypasses.

07.12.20256 min

Cloudflare Outage Technical Analysis: The Lua Bug That Stopped 28% of the Internet

On December 5, 2025, Cloudflare experienced a 25-minute outage. We examine the technical details—from the React vulnerability and WAF buffer change to the fatal Lua exception.

06.12.20255 min

Stuxnet Moment for AI? How Claude Code and Autonomous Agents Are Rewriting the Rules of Cyberwarfare

Forget phishing with typos. 2025 has ushered in the era of "agentic AI." We analyze how developer tools like Claude Code have become weapons for APT groups and why "Vibe Hacking" is a term you need to know.

06.12.202513 min

Cloudflare Down Again: December Outage and Real Inception

On December 5, Cloudflare had another hiccup, dragging down Zoom and Fortnite. Plus, we learned that DowndetectorDowndetector is not a meme, but reality.

05.12.20254 min

React and Next.js Under Fire: Critical RCE Vulnerability (CVSS 10.0!)

A critical vulnerability has been detected in React Server Components (CVE-2025-55182). The flaw allows for Remote Code Execution and received a maximum severity score of 10/10.

05.12.20254 min

Kids Online 2025: Patostreams, "Sleepy Chicken" and Laws that Punish Victims. A Major Analysis

The number of security incidents involving children has hit the roof - over 600,000 reports. We analyze NASK and Police data: from deadly TikTok challenges, through Roblox scams, to dramatic legal loopholes in sexting.

05.12.202516 min

Vibe Coding: Revolution or Russian Roulette? The Dark Side of AI Programming

Everyone is "feeling the vibe," but no one is reading the code. We analyze the Vibe Coding phenomenon, the plague of Slopsquatting, and how AI is silently degrading our application security.

02.12.202521 min

Live OSINT Lesson: How Journalists Tracked Down an Internet Troll

Analysis of 75,000 posts, geolocation of a window view, and... a dog photo. See how OSINT techniques unmasked the hater "Morgenstern616".

28.11.20256 min

Communication Privacy 2025: Signal vs WhatsApp [Complete Comparison + PGP Setup]

Which app REALLY protects your privacy? Compare encryption, metadata, and risks. WhatsApp collects more than you think, Telegram does NOT encrypt by default. Bonus: Step-by-step PGP setup for true anonymity. Guide for privacy-conscious users.

23.11.202519 min

Operation Horizon: Government Mobilizes 10,000 Soldiers and Calls for Citizen Vigilance

Official gov.pl statement confirms the launch of Operation Horizon. The army will support the Ministry of Interior in protecting critical infrastructure, and the government focuses on "citizen activation" in detecting sabotage.

20.11.202511 min

Why Your VPN Is Not Enough? A Comprehensive Analysis of Anonymity in Cyberspace

Forget simple tunneling. In a world where AI reads packets like a book and network switches correlate attacks themselves, privacy demands a paradigm shift.

20.11.202524 min

Anatomy of a Disaster: Why Cloudflare Went Silent? Technical Analysis of the November 18 Incident

On November 18, the internet held its breath. Cloudflare, the CDN giant, went silent for several hours. It wasn’t a DDoS attack, but a bug that exposed the fragility of modern infrastructure. Here is a deep technical analysis of how a single database permission change took down half the web.

19.11.202519 min

0-Day Vulnerabilities: The Invisible Weapon. Anatomy, Market, and Defense Against the Unknown

A comprehensive analysis of the Zero-Day phenomenon: from technical details of memory corruption, through the multi-million black market and history of cyberweapons (Stuxnet, Pegasus), to Polish legal realities and defense strategies in the age of AI.

18.11.202539 min

Internet on its Knees: Cloudflare Goes Down a Month After AWS. Chronicle of a Black Autumn

November 18 marks the day "Error 500" became the world most viewed page. Cloudflare joins AWS in paralyzing X, ChatGPT, and Zoom. We analyze the causes and impact.

18.11.20257 min

Akira Group Racks Up $244 Million as Agencies Warn of New Tactics

The Akira ransomware group has earned over $244 million. A joint report from US, French, German, and Dutch agencies reveals their new targets (Nutanix) and exploited vulnerabilities (Cisco, Veeam, VMware).

17.11.20255 min

CBZC "Disappears"? Police Join Forces to Create National Investigative Bureau

A major restructuring in the Polish Police. The Central Bureau for Combating Cybercrime (CBZC) is merging with the CBŚP (Central Police Investigation Bureau) to form a new super-unit: the National Investigative Bureau.

17.11.20253 min

The Death of "Castle and Moat". Why Mistrust is the New Currency in Cybersecurity

Traditional security models are obsolete. Learn why the "Never Trust, Always Verify" philosophy is becoming a legal and technological standard, and why your firewall is no longer enough.

10.11.202514 min

Stop Waiting for the Alarm. Why Your Network Needs a Hunter, Not Just a Guard

Traditional cybersecurity is waiting for a breach. Threat Hunting is meeting it halfway. Discover why paranoia (the controlled kind) is the healthiest strategy for your organization.

10.11.202513 min

Cloud Security 2025: Best Practices for AWS, Azure, and GCP - Zero Trust, IAM, CSPM, and Shared Responsibility Model

IAM misconfiguration is the leading cause of cloud incidents. Discover differences between AWS, Azure, and GCP in Shared Responsibility Model, how to implement Zero Trust, avoid "toxic combinations" of permissions, secure CMK keys, and automate CSPM for NIS2 compliance.

07.11.202535 min

The End of the "Console Clicking" Era. How SOAR and Agentic AI Save Us from Digital Burnout

SOC analysts are drowning in a data flood, wasting hours on false alarms. Is 2025 and the arrival of autonomous AI agents the moment machines finally let humans stop "chasing ghosts" and start thinking strategically?

05.11.202514 min

Incident Response Plan 2025: How to Prepare a Company for a Cyberattack? - NIS2 Requirements, 24/72h Rule, and Tabletop Exercises

In 2025 the question is "when", not "if" an attack will happen. The board bears personal responsibility up to 600% of salary, NIS2 requires 24/72h reporting, and "pulling the plug" can destroy evidence. Practical guide to building IRP - from CSIRT to Tabletop Exercises.

04.11.202532 min

NIS2 in Poland 2025: 5 Truths That Will Change Everything in Your Company - Complete Guide

The NIS2 Directive is not just another GDPR - it`s a cybersecurity revolution with personal board liability and penalties up to 100 million PLN. Discover if your company is covered and how to avoid severe sanctions.

03.11.202531 min

SIEM vs XDR 2025: Which Solution to Choose for Your Company? - Comprehensive Comparison

SIEM or XDR? Discover key differences between logs and telemetry, learn the true TCO cost, and find out why a hybrid model might be the best solution for your SOC in 2025.

26.10.202534 min

Cloud in Strategic Sectors: Engine of Innovation or Systemic Risk?

After the recent AWS outage that shook the global internet, we must ask a fundamental question: can we entrust our military, medicine, and critical infrastructure to the cloud?

21.10.202519 min

Global AWS Outage: How One Region Switched Off Half the Internet

A global AWS outage, with its epicenter in US-EAST-1, paralyzed thousands of services today. From Slack and Zoom to Fortnite and banks—the internet took a forced day off. The culprit: DNS.

20.10.20259 min

OSINT: A short guide to the art of Open Source Intelligence

From tracking Russian missile systems to vetting business partners – discover what OSINT is and how to legally gather intelligence from open sources. Learn the tools, techniques, and secrets of digital detectives.

12.10.202537 min

NIS2 2025: Avoid Fines Up to €10M [Complete Implementation Guide]

⚠️ October 18, 2024 - NIS2 implementation deadline passed. If your company is not compliant, you risk fines up to €10 million. Check obligations, critical deadlines, and step-by-step implementation plan. [2025]

11.10.202518 min

ISO 27001 Certification: How to Achieve in 6-12 Months [Process + Costs 2025]

ISO 27001 certificate is your ticket to tenders and client trust. Learn the step-by-step certification process, real costs (€10-50k), and 8 key controls you must implement. Guide for companies in Poland.

11.10.202513 min

APT28 / Fancy Bear: Anatomy of the Digital Bear. How an Elite Hacking Unit of Russian Intelligence Operates

An in-depth analysis of one of the world's most dangerous APT groups—Unit 26165 of the Russian GRU. Discover its tactics, tools, and most infamous operations, from interfering in the US election to attacks on Polish institutions.

11.10.202518 min

MSSP 2025: 4 Traps When Choosing a Managed Security Provider (And Why Your Own SOC Costs 5x More)

A 24/7 in-house SOC requires 5-6 analysts per position and costs 5x more than you think. Discover 4 critical mistakes when choosing an MSSP, the MSP vs MSSP difference, the truth about "15-minute response" and why outsourcing doesn't absolve management from NIS2 responsibility.

10.10.202530 min

Poland in the Digital Crosshairs: Why Are We the Second Most Attacked Country in the World?

The latest ESET report sheds light on Poland's alarming position in the global cybersecurity threat ranking. We are the second most attacked country in the world. We analyze what this means and what the threat landscape looks like, from ransomware to attacks on critical infrastructure.

09.10.202513 min

How EDR and XDR Are Changing the Face of Cybersecurity

EDR and XDR are key technologies in modern cybersecurity. Understanding their differences in scope and approach is crucial for building an effective defense strategy.

09.10.202512 min

AI: The New Weapon in the Arsenal of Cybercriminals and Defenders. A 2025 Threat Landscape Review

The year 2025 brings a revolution in cybersecurity, where Artificial Intelligence is becoming a double-edged sword. The latest reports from ENISA and OpenAI reveal how AI is driving both advanced attacks and innovative defense methods, redefining the digital battlefield.

08.10.202521 min

The End of Thinking, Writing, and Reading? The Future in AI’s Hands

Is artificial intelligence truly stripping us of our thinking and writing abilities? This article dives into how AI is reshaping our reading habits and intellectual lives in the digital revolution era.

07.10.20259 min

Thousands of Cyberattacks Assault Poland’s Energy Sector – Are We Ready for a Blackout?

In 2024, Poland’s energy sector was hit by over 4,000 cyber incidents, making up 4.5% of all national attacks. Experts warn that 2025 will be even more challenging, with rising risks from disinformation and hybrid threats.

06.10.20255 min

Russian Cyber Onslaught on Poland: 300 Daily Incidents, Hospitals and Water in Crosshairs – €1B Shield Activated!

Poland tops global charts for cyberattacks with over 300 Russian incidents daily targeting critical infrastructure like hospitals and water systems. PM Tusk\

06.10.20256 min

Cl0p Steals Data Through Oracle Vulnerability – Is Your Company Next in Line?

The Cl0p ransomware group exploited a zero-day in Oracle E-Business Suite (CVE-2025-61882), stealing data from multiple companies in August. Oracle just released a patch, but experts warn: check your systems now, as attacks continue.

06.10.20254 min

New Ransomware Cripples Companies: BlackCat 3.0 on the Horizon

A new variant of the BlackCat 3.0 ransomware is wreaking havoc among companies worldwide, leveraging advanced encryption techniques. Is your organization prepared for this digital tsunami?

06.10.20258 min

HTTP/2: A New Vulnerability Threatens the Entire Internet

A new critical vulnerability in the HTTP/2 protocol, dubbed "CONTINUATION Flood," has been discovered. It allows for powerful DDoS attacks that can paralyze servers worldwide.

04.10.20255 min

Massive Data Breach on Spanish E-learning Platform: 6 Million Users at Risk

A Spanish e-learning platform has fallen victim to a massive attack, resulting in the theft of data from over 6 million users. The information has been put up for sale on a hacker forum.

04.10.20253 min

Logistics Giant Paralyzed! Ransomware Attack Halts European Deliveries

One of Europe's largest logistics operators, "Trans-Europe Express," has fallen victim to a massive ransomware attack. Operations across its entire network have been halted, threatening serious supply chain disruptions.

04.10.20254 min

Poland in the Crosshairs: Deputy Minister Gawkowski Reveals Scale of Cyberattacks

Every day, Poland repels between 2,000 and 4,000 cyberattacks, neutralizing 99% of them, announced Deputy Prime Minister and Minister of Digital Affairs Krzysztof Gawkowski. This paints a picture of a daily, invisible war in our cyberspace.

01.10.20254 min

In-Depth Analysis of WhatsApp 0-Day Flaw: How Did the Silent Attack on iPhones Work?

A detailed analysis of the mechanism and discovery of the CVE-2025-55177 vulnerability in WhatsApp. We explain how attackers combined two 0-day flaws to create a powerful "zero-click" spyware tool.

01.10.202511 min

Cyber Threat Landscape: Ransomware on the Rise, Cisco Attacks, and Critical VMware Flaws

The first rise in ransomware attacks in three years, state-sponsored campaigns exploiting Cisco firewall vulnerabilities, and urgent patches for VMware products—welcome to October.

01.10.20254 min

'LabHost' Shut Down: Global Police Action Strikes Phishing-as-a-Service Provider

In one of the largest international operations, law enforcement from over a dozen countries, coordinated by Europol, has taken down LabHost—one of the world’s largest Phishing-as-a-Service platforms.

01.10.20254 min

Tourists or Spies? Incident at Warsaw Waterworks Is a Serious Warning

An in-depth analysis of the "Gruba Kaśka" water intake incident. The detention of foreigners photographing the facility is a textbook example of reconnaissance that could precede a cyberattack on critical infrastructure.

30.09.20256 min

Ransomware Attack on US Hospital Network. Patient Data in Hackers' Hands

One of the largest hospital networks in the United States, Ascension, has fallen victim to a major ransomware attack. The incident led to operational paralysis, and a court has just allowed a class-action lawsuit to proceed.

30.09.20254 min

Payment Paralysis in Poland: Massive Outage of PayTel Terminals

On Monday, a nationwide failure of PayTel payment terminals occurred. For several hours, customers across Poland were unable to pay by card, causing chaos in retail and services.

29.09.20253 min

Vacation Canceled? Massive Data Breach at Travel Site VoyageSecure!

The data of millions of customers of the popular booking platform VoyageSecure, including travel histories and contact details, has been put up for sale on the darknet after hackers exploited a cloud misconfiguration.

24.09.20254 min

Critical Flaw in GitLab: Urgent Update Required!

GitLab has released a critical security update patching vulnerability CVE-2025-8243 (CVSS 9.9), which allows for unauthorized execution of CI/CD pipelines and project takeover.

24.09.20253 min

A Weekend with Cash: Nationwide Payment Terminal Outage. A Cyberattack or Just a Glitch?

Many Poles experienced a digital detox as payment terminals crashed nationwide this past weekend. Officially labeled "technical issues," but whispers in the industry suggest a cyberattack.

23.09.20254 min

Digital Armageddon in NYC: Anatomy of the Thwarted Attack on the UN Summit

A deeper analysis of the 100,000 SIM card farm discovery in New York. How does this technology work, what attack scenarios could have been realized, and who might be behind the operation that had the potential to paralyze a metropolis?

23.09.20258 min

Airport Chaos in Europe: Cyberattack Grounds Passengers

Weekend paralysis at major European airports. A cyberattack on software provider Collins Aerospace caused massive delays and chaos, forcing airlines to resort to manual passenger check-ins.

22.09.20254 min

Urgent Alert: Google Patches Critical Chrome Flaw Exploited by Hackers

Google has released an emergency update for the Chrome browser to patch a zero-day vulnerability (CVE-2025-10585) that is already being actively exploited in the wild. Don't wait, update your browser now!

22.09.20253 min

The Great NPM Heist: Supply Chain Attack Shakes the JavaScript World

An unprecedented supply chain attack on the NPM repository. Over 18 popular libraries were hijacked, threatening billions of weekly downloads. The target was cryptocurrency wallets.

15.09.20254 min

Poland Paralyzed? Payment Terminal Outage Caused Chaos, but It’s Not a Cyberattack!

On Saturday, September 13, Poland experienced a widespread outage of eService payment terminals, which disabled card and BLIK payments in numerous stores. While initial fears pointed to a cyberattack, the Ministry of Digital Affairs confirmed the issue was of a technical nature.

15.09.20254 min

Patch Tuesday: Microsoft Patches Two Zero-Days and a Critical NTLM Flaw

September's Patch Tuesday brings 84 security fixes, including for two actively exploited zero-day vulnerabilities. Administrators should pay close attention to a critical flaw in Windows NTLM.

15.09.20253 min

EU Introduces the Data Act. The End of the "Digital Prison" for IoT Devices

As of September 12, 2025, the new rules of the EU Data Act are in force. The regulation aims to give users more control over data from IoT devices and make it easier to switch cloud providers.

15.09.20254 min

Blackout in Berlin: Anarchist Group Claims Responsibility for Arson

A major power outage in Berlin, caused by arson, has cut off over 50,000 customers. An anarchist group has claimed responsibility for the attack.

15.09.20252 min

CJEU on Data Pseudonymization: A Key GDPR Ruling

The Court of Justice of the EU has ruled that pseudonymized data remains personal data if the possibility of re-identification exists.

14.09.20252 min

Critical "SessionReaper" Vulnerability in Adobe Commerce and Magento

Adobe warns of a critical vulnerability, CVE-2025-54236 "SessionReaper," which allows for customer account takeover in Adobe Commerce and Magento platforms.

13.09.20252 min

Record DDoS Attack in Europe: Threat from IoT and MikroTik Routers

FastNetMon thwarted one of the largest DDoS attacks in Europe, reaching 1.5 billion packets per second, originating from thousands of infected IoT devices.

12.09.20253 min

Top Critical Vulnerabilities of the Week: September 2025

A review of the most dangerous cybersecurity vulnerabilities reported in the second week of September 2025—priority flaws concern Windows, Microsoft Office, Android, and ICS.

12.09.20254 min

Let's see how we can help you!

Leave a message and our dedicated advisor will contact you.

Send us a message

Email address *

Company VAT number or name (optional)

Contact phone (optional)

Company size (optional)

Message to Client Guardian *0/10000