Post #4493591

There's a follow-up report from #CERTPolska on the cyber attack from last December targeting Polish DERs and heat/power plant. Lots of interesting findings. "Funny" also, that the operator didn't realise they were targeted by a cyber attack: "As maintenance work was being carried out at the facility, the entity initially assumed that the process interruption had been caused by an error made by the contractor’s engineers and reported the event for informational purposes only. However, due to its awareness of other similar events, CERT Polska initiated incident handling under the assumption that the event may have resulted from a cyberattack." https://cert.pl/uploads/docs/CERT_Polska_Energy_Sector_Incident_Follow_up_Report_2025.pdf