Cyberattacks Up 48% in September 2026, Europe Up 61%: Check Point Report
Check Point: cyberattacks rose 48% year over year in September 2026 and 61% in Europe, with ransomware up 53%. Key takeaways for businesses.
News & analysis
The latest from the world of cybersecurity
Incidents, vulnerabilities, regulations (NIS2, DORA, KSC) and practical guides — we write about what really changes security for businesses.
100 articles
CyberXero: An Access Broker Running 51 AI Agents Puts Poland Second on Its Target List, With 284 Government Domains Scanned
CyberXero uses 51 AI agents to break into WordPress sites and infrastructure. Poland is its No. 2 target, with 284 government domains scanned.
FortiBleed: Over 86,000 Fortinet FortiGate Firewalls Hijacked as FBI Warns Attacks Are Ongoing
FBI warns the FortiBleed campaign has hijacked 86,000+ Fortinet FortiGate firewalls and VPNs, passing access to ransomware gangs. 7 steps to take now.
Poland Will Publicly Name and Shame Companies with Poor Cybersecurity, Says Minister Gawkowski
After the MyDr and Medyc data breaches, Poland's government will publicly name companies that fail to secure data. What it means for boards.
Atlassian CVE-2026-21589 Under Active Attack: Jira and Confluence Exploited 2 Hours After PoC Release
Hackers are exploiting CVE-2026-21589 in Jira, Confluence and Bitbucket Data Center to steal crowd.properties credentials. Here's what to do now.
Critical Atlassian Flaw CVE-2026-21589 Lets Attackers Read Files in Jira, Confluence and Bitbucket Data Center Without Logging In
CVE-2026-21589 (CVSS 9.3) affects eight Atlassian Data Center products; Cloud is already patched. Fixed versions and what to do if you can't patch yet.
ASOS Hacked: Attackers Send "ASOS HACKED" Push Notification to Customers Through the Official App
Attackers hijacked a third-party ASOS messaging platform and pushed a threat to app users. Names and contact details may be exposed. What's the lesson?
Denmark CPR Data Breach: 8.8 Million People Exposed Through a Private Company's Account
Attackers spent 10 days pulling names, addresses and CPR numbers via a partner firm's legitimate access. What it teaches about third-party access risk.
Citrix NetScaler SAML Zero-Day (CVE-2026-88779) Exploited in Attacks: Fixed Versions and Next Steps
CVE-2026-88779 in SAML-enabled NetScaler ADC and Gateway was exploited before a patch. Attackers inject commands via the username field. Patch now.
Fakturownia Data Breach: What We Know One Week Later and What Your Company Must Do Now
Over 600,000 customers and about 6 TB of invoices exposed. The facts on the Fakturownia breach and how to limit the damage, including notifying UODO.
Critical FortiMail Zero-Day CVE-2026-104286 Exploited in the Wild: Patch Your Email Gateways Now
CVE-2026-104286 (CVSS 9.8) lets unauthenticated attackers write arbitrary files on FortiMail and is actively exploited. See patches and mitigations.
TurboQuant: Solving AI's Biggest Memory Problem for Free
Modern LLMs are hitting a memory wall. TurboQuant's vector compression shrinks the KV cache fivefold without sacrificing model intelligence.
The litellm Supply Chain Attack: How One pip install Could Have Hijacked Your Entire Infrastructure
litellm, pulled 97M times a month, shipped malware that ran without an import. Only its own bug stopped silent theft of SSH keys and cloud credentials.
Do You Need Antivirus on Your Phone? Our Take on Poland's Digital Affairs Minister's Advice
Poland's Digital Affairs Minister recommends phone antivirus. We explain what Android antivirus apps can and can't do, and whether you really need one.
How a Hacker Used Claude and ChatGPT to Steal 150 GB of Mexican Government Data
A hacker tricked Anthropic's Claude and OpenAI's ChatGPT into helping steal 150 GB of Mexican government data. Here's how the AI jailbreak worked.
KSeF 2.0 Scams: Phantom Invoices, Fake Tax Office Emails and How to Protect Your Business
Mandatory KSeF is here. Learn how phantom invoices and fake tax office emails target Polish businesses, and how to protect your company from fraud.
Tesla Patents a "Mathematical Cheat Code": 32-Bit Precision on 8-Bit AI Chips
Tesla's Mixed-Precision Bridge patent application brings 32-bit AI precision to cheap 8-bit chips. What it means for FSD, Optimus and edge AI.
Pentester's Toolkit 2026: The Best Free Open Source Security Tools
A complete roundup of the best free, open source penetration testing tools for 2026, from operating systems and web scanners to advanced code analysis.
SOCaaS vs. In-House SOC: Cost and ROI Analysis for Companies in Poland (2026 Edition)
In-house SOC vs. SOCaaS: costs, TCO and ROI compared, a case study, and NIS2's impact on IT budgets. Why the hybrid model wins in 2026.
Threat Hunting: How to Stop Collecting Logs and Start Catching Hackers
A practical guide to SIEM transformation: data normalization, the Pyramid of Pain and Detection as Code. Learn to detect behaviors, not just signatures.
mObywatel Source Code Release: Poland's Open-Source Promise Turns Into Facade Transparency
Poland published the mObywatel app's source code, but login walls, right-click blocks and missing backend code turned openness into a facade.
Chrome Zero-Day Report 2025: What a Record Year of Exploited Vulnerabilities Says About Browser Security
Eight critical Chrome zero-days in one year. How APT groups weaponized the V8 engine, and why the sandbox alone is no longer enough in 2025.
WormGPT and KawaiiGPT: 5 Facts About the Dark Side of AI
AI isn't only about medicine and convenience. Malicious LLMs like WormGPT and KawaiiGPT are democratizing cybercrime and crafting flawless scams.
ISA/IEC 62443: 6 Surprising Truths About Industrial Cybersecurity You Need to Know
Industry 4.0 has ended the era of isolated factories. Learn how IEC 62443 upends traditional thinking about protecting critical infrastructure.
AI on the Therapist's Couch: What ChatGPT, Gemini and Grok "Think" About Their Creators
Can AI have trauma? Researchers put ChatGPT, Gemini and Grok through therapy sessions. The result: synthetic psychopathology and a new jailbreak risk.
What Do People Really Use AI For? 5 Surprising Truths from 100 Trillion Tokens
An analysis of 100 trillion tokens debunks AI myths: roleplay beats office productivity, and users stick to models like Cinderella's glass slipper.
Why Is RAM So Expensive in 2025? 5 Hidden Causes Behind the Memory Price Surge
Why did RAM prices skyrocket in 2025? It's not just AI. Inside the silicon physics, Samsung's strategy and the end of Windows 10.
React2Shell Aftershocks: New React and Next.js Vulnerabilities Open Pandora's Box
Patched the CVSS 10.0 React2Shell flaw? You're not done. New React Server Components bugs bring DoS and source code exposure to Next.js apps.
One Address to Rule Cybersecurity: What You Need to Know About Poland's New cyber.gov.pl Portal
Poland's cyber defense has two faces: the new cyber.gov.pl portal with free tools for citizens, and openly acknowledged offensive cyberweapons.
Dom Development Data Breach: How Buying a Home Put Families' Identities at Risk
The Dom Development cyberattack exposed PESEL numbers, salaries and children's data. What leaked, what it means, and how to protect yourself now.
Poland Goes to War on Disinformation With Record Funding in 2026
Poland plans record spending to fight disinformation in 2026. Inside the government's strategy, from a huge awareness campaign to defending NASK.
Tor's Counter Galois Onion (CGO) Upgrade: How 2025 Cryptography Crushes a 2002 Standard
Tor is replacing AES-CTR relay encryption with Counter Galois Onion (CGO). What changes, why tagging attacks fail, and where it's 3x faster.
Your Gray Checkmarks in WhatsApp and Signal Reveal What You're Doing and Where You Are
Researchers show how delivery receipts in WhatsApp and Signal let anyone with your number track your screen activity and location and drain your battery.
React2Shell (CVE-2025-55182): Vercel Races to Patch a Critical Next.js RCE Flaw
Running Next.js? React2Shell (CVE-2025-55182) enables remote code execution. Here's how Vercel responded and what you need to patch right now.
Security Operations Center (SOC): The Complete 2026 Guide to Building and Implementing a SOC
Your 2026 guide to the Security Operations Center: team structure, SIEM/XDR/SOAR, NIS2 requirements, deployment models and AI. For CISOs and IT leaders.
Cloudflare Outage Technical Analysis: The Lua Bug That Took Down 28% of the Internet
Cloudflare's 25-minute outage on December 5, 2025, explained: a React CVE fix, a WAF buffer change and a fatal Lua nil-value bug.
How Claude Code and Autonomous AI Agents Can Hack Your Company
Agentic AI is rewriting the threat landscape. Learn how Claude Code was weaponized by APT groups like GTG-1002 and why Vibe Hacking matters.
Cloudflare Down Again: The December 5 Outage and a Real-Life DownDetector Inception
On December 5, Cloudflare stumbled again, taking Zoom and Fortnite down with it. Plus: DownDetectorDownDetector is real, not a meme.
Critical React and Next.js RCE Vulnerability CVE-2025-55182 (CVSS 10.0): Who Is Affected and How to Patch
A critical flaw in React Server Components (CVE-2025-55182) enables unauthenticated remote code execution and scored a maximum CVSS 10.0. Patch now.
Kids Online in 2025: Patostreams, "Sleepy Chicken," and a Law That Punishes the Victims
Over 600,000 incident reports. We break down NASK and police data on deadly TikTok challenges, Roblox scams, and Poland's sexting legal trap.
Vibe Coding: Revolution or Russian Roulette? The Dark Side of AI-Assisted Programming
Everyone's feeling the vibe, but nobody reads the code. We look at vibe coding, the rise of slopsquatting, and how AI quietly weakens app security.
OSINT in Action: How Journalists Unmasked an Anonymous Internet Troll
75,000 posts, a geolocated window view and... a photo of a dog. See how OSINT techniques unmasked the online hater behind "Morgenstern616".
Signal vs WhatsApp vs Telegram (2025): Which Messenger Is Really Private? [+ PGP Setup Guide]
Signal vs WhatsApp vs Telegram: which messenger truly protects your privacy? Encryption, metadata and backups compared, plus a step-by-step PGP guide.
Operation Horizon: Poland Deploys 10,000 Troops to Protect Critical Infrastructure and Asks Citizens to Stay Alert
Poland launches Operation Horizon: 10,000 troops will guard critical infrastructure, and a new MoD app will let citizens report suspicious activity.
Why Your VPN Isn't Enough: A Deep Dive into Online Anonymity in the Age of AI
Encryption isn't enough. AI-driven traffic analysis, website fingerprinting and smart networks can unmask VPN and Tor users. Here's what protects you.
Anatomy of a Disaster: Why Cloudflare Went Dark — A Technical Breakdown of the November 18 Outage
On November 18, 2025, Cloudflare went dark for hours. It wasn't a DDoS attack but a database permissions change. Here's the full technical breakdown.
Cloudflare Outage of November 18, 2025: The Internet Goes Down Again a Month After AWS
On November 18, 2025, a Cloudflare outage took down X, ChatGPT and Zoom just a month after AWS. Here's what happened and why it matters.
Zero-Day Vulnerabilities Explained: How Exploits Work, the Exploit Market, and How to Defend Against the Unknown
Zero-day vulnerabilities explained: how exploits work, the multimillion-dollar exploit market, Stuxnet and Pegasus, and how to defend in the AI era.
Akira Ransomware Has Raked In $244 Million: US and European Agencies Warn of New Tactics
Akira ransomware has extorted over $244M. A joint US, French, German and Dutch advisory reveals new targets (Nutanix) and Cisco, Veeam, VMware flaws.
Is Poland's Cybercrime Bureau (CBZC) Going Away? Police Merge Units into a New National Investigation Bureau
A major Polish Police overhaul: the Central Cybercrime Bureau (CBZC) merges with the CBŚP to form a new super-unit, the National Investigation Bureau.
The Death of Castle-and-Moat Security: Why Zero Trust Is the New Currency of Cybersecurity
Your firewall is no longer enough. Learn why Zero Trust's "never trust, always verify" is becoming the legal and technical standard under NIS2 and DORA.
Threat Hunting: Why Your Network Needs a Hunter, Not Just a Guard
Traditional security waits for a breach. Threat hunting goes looking for it. Learn why controlled paranoia is the healthiest strategy for your business.
Cloud Security Best Practices 2025: AWS vs. Azure vs. GCP – Zero Trust, IAM, CSPM and the Shared Responsibility Model
IAM misconfiguration is the leading cause of cloud incidents. Compare AWS, Azure and GCP: shared responsibility, Zero Trust, CMK, CSPM and NIS2.
GDPR and Cybersecurity: A Practical Guide to Article 32, DPIA, Encryption and Breach Response
A practical GDPR security guide: Article 32 controls, DPIA, encryption standards, MFA, backups and the 72-hour breach procedure for CISOs and DPOs.
The End of "Console Clicking": How SOAR and Agentic AI Are Saving SOC Teams from Burnout
SOC analysts are drowning in false alarms. Here's how SOAR playbooks and agentic AI cut response times from hours to seconds and help end alert fatigue.
Incident Response Plan 2025: How to Prepare Your Business for a Cyberattack – NIS2 Requirements, the 24/72-Hour Rule and Tabletop Exercises
It's not if but when. Build an NIS2-ready incident response plan: 24/72h reporting, CSIRT roles, ransomware playbooks and tabletop exercises.
NIS2 in Poland 2025: 5 Hard Truths That Will Change Everything for Your Business (Complete Guide)
NIS2 isn't another GDPR. Personal board liability and fines up to PLN 100 million. Find out if your company is covered and how to avoid penalties.
SIEM vs XDR in 2025: Which One Should Your Business Choose? A Complete Comparison
SIEM or XDR? Compare logs vs. telemetry, the true TCO, and see why a hybrid SIEM + XDR model may be the best fit for your SOC in 2025.
Cloud Computing in Critical Sectors: Innovation Engine or Systemic Risk? Lessons from the AWS Outage
After the AWS outage that shook the internet, can the military, healthcare and critical infrastructure trust the cloud? A look at risk and resilience.
AWS Outage, October 20, 2025: How One Region Took Down Half the Internet
A DNS failure in AWS US-EAST-1 on October 20, 2025 took down Slack, Zoom, Fortnite, Coinbase and banks worldwide. Here's what broke and why.
What Is OSINT? A Practical Guide to Open-Source Intelligence Tools, Techniques and OPSEC
What is OSINT and how do you gather intelligence legally from open sources? Tools, techniques, OPSEC and real cases, from MH17 to business due diligence.
APT28 (Fancy Bear): How Russia's Elite GRU Hacking Unit Operates
Inside APT28 (Fancy Bear), Russia's GRU Unit 26165: its tactics, tools and biggest operations, from the 2016 US election hack to attacks on Poland.
ISO 27001 Certification: How to Get Certified in 6–12 Months [Process + Costs 2025]
ISO 27001 certification step by step: the process, real costs (PLN 40k–200k), and 8 key controls to implement. A guide for companies in Poland.
NIS2 Compliance 2025: How to Avoid Fines of Up to EUR 10M [Complete Implementation Guide]
⚠️ The NIS2 deadline passed on October 18, 2024. Non-compliant firms face fines up to EUR 10M. Learn your obligations, deadlines and implementation steps.
How to Choose an MSSP in 2025: 4 Costly Mistakes to Avoid (and Why an In-House SOC Costs 5x More)
A 24/7 in-house SOC needs 5-6 analysts per seat and costs 5x more than you think. Avoid the 4 MSSP selection traps and know your NIS2 board liability.
EDR vs. XDR: How Detection and Response Are Reshaping Cybersecurity
EDR vs. XDR explained: how each detects and responds to threats, where they differ in scope, and which fits your organization's security strategy.
Why Is Poland the Second Most Cyberattacked Country in the World?
ESET ranks Poland the world's second most attacked country. We break down why, from ransomware and DDoS to weak passwords and missing MFA.
AI-Powered Cyberattacks in 2025: Key Takeaways from the ENISA and OpenAI Reports
How AI is fueling phishing, malware and disinformation in 2025, and helping defenders fight back. Key takeaways from the latest ENISA and OpenAI reports.
The End of Thinking? How AI Is Eroding Our Ability to Read, Write and Think
Is AI eroding our ability to think, write and read deeply? Derek Thompson's warning about the quiet decline of human thinking in the age of ChatGPT.
Asahi Ransomware Attack: Hackers Halt Beer Production in Japan
Japanese brewer Asahi was hit by ransomware that halted production at key plants. What happened, why it matters for supply chains, and how to defend.
BlackCat 3.0 Ransomware Is Crippling Businesses: What You Need to Know
BlackCat 3.0 ransomware is hitting companies worldwide with advanced encryption and double extortion. Learn how it works and how to stay protected.
Cl0p Exploits Oracle E-Business Suite Zero-Day (CVE-2025-61882) to Steal Data: Is Your Company Next?
Cl0p exploited an Oracle E-Business Suite zero-day (CVE-2025-61882) to steal corporate data. Oracle's fix is out: patch now and check for compromise.
Over 4,000 Cyberattacks Hit Poland's Energy Sector in 2024: What It Means for Critical Infrastructure
Poland's energy sector faced 4,000+ cyber incidents in 2024, 4.5% of all attacks nationwide. Experts warn 2025 will be tougher amid hybrid threats.
Russian Cyberattacks on Poland: 300 Incidents a Day, Hospitals and Water Systems Targeted, and a €1 Billion Cyber Shield
Poland now tops global cyberattack rankings, with 300+ Russian incidents a day hitting hospitals and water utilities. Warsaw answers with a €1B budget.
HTTP/2 CONTINUATION Flood: New Vulnerability Threatens the Entire Internet
A critical new HTTP/2 vulnerability called CONTINUATION Flood enables powerful DDoS attacks that can cripple servers around the world.
Logistics Giant Paralyzed: Ransomware Attack Halts Deliveries Across Europe
Ransomware hits Trans-Europe Express, one of Europe's largest logistics operators, halting operations network-wide and threatening supply chains.
Massive E-Learning Data Breach in Spain Exposes 6 Million Users
A Spanish e-learning platform was hit by a massive breach exposing data on over 6 million users, now up for sale on a hacker forum.
Cyber Threat Landscape: Ransomware Rises, Cisco ASA Zero-Days Exploited, and Critical VMware Flaws Patched
Ransomware attacks rise for the first time in three years, state-sponsored hackers exploit Cisco firewall zero-days, and VMware ships critical patches.
LabHost Takedown: Global Police Operation Hits Phishing-as-a-Service Providers
Europol-coordinated police from 19 countries took down LabHost, one of the world's largest Phishing-as-a-Service platforms, arresting 37 suspects.
Poland Under Fire: Up to 4,000 Cyberattacks a Day, Says Deputy PM Gawkowski
Poland fends off 2,000–4,000 cyberattacks every day and neutralizes 99% of them, says Deputy PM and Digital Affairs Minister Krzysztof Gawkowski.
WhatsApp Zero-Day Deep Dive: How the Silent Zero-Click Attack on iPhones Worked
How the WhatsApp zero-click exploit chain worked: CVE-2025-55177 and Apple's CVE-2025-43300 combined to silently install spyware on iPhones.
Ascension Ransomware Attack: US Hospital Network Crippled, Patient Data Stolen
Ascension, one of the largest US hospital networks, was crippled by ransomware. Now a federal court has allowed a patient class action to proceed.
Tourists or Spies? The Incident at Warsaw's Water Supply Is a Serious Warning Sign
Foreigners caught filming Warsaw's Gruba Kaśka water intake: a textbook case of reconnaissance that can precede a cyberattack on critical infrastructure.
Poland Payment Outage: Nationwide PayTel Card Terminal Failure Halts Card Payments for Hours
A nationwide PayTel terminal outage left shoppers across Poland unable to pay by card for hours on Monday, throwing retail and services into chaos.
Critical GitLab Vulnerability CVE-2025-8243 (CVSS 9.9): Patch Your Instances Now
GitLab patched critical flaw CVE-2025-8243 (CVSS 9.9) that lets attackers run CI/CD pipelines as other users and take over projects. Update now.
Vacation Canceled? Massive VoyageSecure Data Breach Puts Millions of Travelers' Data Up for Sale
Data on millions of VoyageSecure customers, including travel histories and contact details, is for sale on the dark web after a cloud misconfiguration.
Digital Armageddon in New York: Inside the Foiled SIM Farm Attack on the UN Summit
Inside the Secret Service takedown of a 100,000-SIM farm near the UN in New York: how SIM boxes work, possible attack scenarios, and who may be behind it.
Nationwide Payment Terminal Outage in Poland: Cyberattack or Technical Failure?
Card terminals went dark across Poland over the weekend. The operator blames technical issues, but industry insiders point to a possible cyberattack.
European Airport Chaos: How a Cyberattack on Collins Aerospace Grounded Passengers
A cyberattack on Collins Aerospace's check-in software crippled Heathrow, Berlin and Brussels airports, forcing airlines back to manual check-in.
Urgent: Google Patches Actively Exploited Chrome Zero-Day (CVE-2025-10585)
Google has issued an emergency Chrome update to fix CVE-2025-10585, a V8 zero-day already exploited in attacks. Update your browser now.
Berlin Blackout: Anarchist Group Claims Arson Attack on Power Grid
An arson attack on high-voltage pylons left over 50,000 Berlin homes and businesses without power. An anarchist group has claimed responsibility.
EU Data Act Takes Effect: The End of the "Digital Prison" for IoT Devices
The EU Data Act has applied since September 12, 2025, giving users control over IoT device data and making it easier to switch cloud providers.
Poland Paralyzed? Nationwide Payment Terminal Outage Sparks Chaos, but It Wasn't a Cyberattack
On September 13, an eService payment terminal outage blocked card and BLIK payments across Poland. Officials say it was a technical glitch, not a hack.
September Patch Tuesday: Microsoft Fixes Two Zero-Days and a Critical Windows NTLM Flaw
September's Patch Tuesday delivers 84 security fixes, including two actively exploited zero-days. Admins should prioritize the critical Windows NTLM flaw.
The Great NPM Heist: Supply Chain Attack Rocks the JavaScript World
Unprecedented NPM supply chain attack: 18+ popular packages hijacked, putting over 2 billion weekly downloads at risk. The target: crypto wallets.
CJEU Ruling on Pseudonymized Data: What It Means for GDPR Compliance
The EU Court of Justice ruled that pseudonymized data remains personal data under GDPR when the controller can still re-identify the individuals.
SessionReaper (CVE-2025-54236): Critical Adobe Commerce and Magento Vulnerability
Adobe warns of critical flaw CVE-2025-54236 "SessionReaper," which lets attackers hijack customer accounts on Adobe Commerce and Magento stores.
Record DDoS Attack in Europe: 1.5 Billion Packets per Second from Hijacked IoT Devices and MikroTik Routers
FastNetMon stopped one of Europe's largest DDoS attacks, peaking at 1.5 billion packets per second from thousands of hijacked IoT devices.
Top Critical Vulnerabilities of the Week (September 2025): Windows, Office, Android and ICS
A roundup of the most dangerous vulnerabilities disclosed in the second week of September 2025: priority flaws in Windows, Office, Android and ICS.
ISO 27001 Certification in Poland: Costs, Timeline and Implementation Guide
ISO 27001 certification in Poland explained: risk management, Statement of Applicability, audit stages, timelines and real 2024–2025 costs in PLN.
Nothing found. Try a different word.