CERT Polska has received a report about 2 vulnerabilities (CVE-2026-52748 and CVE-2026-52749) found in Kaon AR2140 routers.

CERT Polska has received a report about 3 vulnerabilities (from CVE-2026-73640 to CVE-2026-73642) found in Dayforce Payroll ...

CERT Polska has received a report about 7 vulnerabilities (from CVE-2026-82928 to CVE-2026-82930 and CVE-2026-82932, CVE-2026 ...

We describe the technical details of the MikroTrick chain, which combines the CVE-2026-67279 and CVE-2026-86060 ...

On 14 September 2026, CERT Polska found two Facebook advertisements targeting Polish users with false warnings that their PDF application had expired. Both ads redirected users to the Google Play ...

CERT Polska has received a report about vulnerabilities in GNU gawk software and participated in coordination of their disclosure. The vulnerability CVE-2026-40467: Use After Free vulnerability has ...

CERT Polska has received a report about vulnerabilities in GNU Bison software and participated in coordination of their disclosure. This issue was fixed in commit ...

CERT Polska has received a report about vulnerability in DirectAdmin Evolution Skin software and participated in coordination of its disclosure. Ticket management system in DirectAdmin Evolution Skin ...

After obtaining our new .NET extraction powers we quickly had a chance to give them another try. This time we decided to focus on a malware family called XWorm - a multi-purpose tool that is most ...

CERT Polska has received a report about vulnerabilities in Logseq software and participated in coordination of their disclosure. The vulnerability CVE-2026-9279: Logseq exposes an IPC handler that ...

The UNC1151/Ghostwriter group remains one of the most active APT groups monitored by the CERT Polska team. For many years, it has consistently conducted phishing campaigns aimed at gaining access to ...