https://securhub.pl/en/blogThe latest news from the world of cybersecurityenTue, 13 Oct 2026 18:40:19 +0000https://securhub.pl/en/blog/2026-10-12-cyberattacks-up-48-in-september-2026-europe-up-61-check-point-reporthttps://securhub.pl/en/blog/2026-10-12-cyberattacks-up-48-in-september-2026-europe-up-61-check-point-reportMon, 12 Oct 2026 10:00:00 +0200Check Point: cyberattacks rose 48% year over year in September 2026 and 61% in Europe, with ransomware up 53%. Key takeaways for businesses.AnalysisSecurHUB Teamhttps://securhub.pl/en/blog/2026-10-11-cyberxero-an-access-broker-running-51-ai-agents-puts-poland-second-onhttps://securhub.pl/en/blog/2026-10-11-cyberxero-an-access-broker-running-51-ai-agents-puts-poland-second-onSun, 11 Oct 2026 10:00:00 +0200CyberXero uses 51 AI agents to break into WordPress sites and infrastructure. Poland is its No. 2 target, with 284 government domains scanned.PolandSecurHUB Teamhttps://securhub.pl/en/blog/2026-10-10-fortibleed-over-86-000-fortinet-fortigate-firewalls-hijacked-as-fbihttps://securhub.pl/en/blog/2026-10-10-fortibleed-over-86-000-fortinet-fortigate-firewalls-hijacked-as-fbiSat, 10 Oct 2026 10:00:00 +0200FBI warns the FortiBleed campaign has hijacked 86,000+ Fortinet FortiGate firewalls and VPNs, passing access to ransomware gangs. 7 steps to take now.IncidentsSecurHUB Teamhttps://securhub.pl/en/blog/2026-10-09-poland-will-publicly-name-and-shame-companies-with-poor-cybersecurityhttps://securhub.pl/en/blog/2026-10-09-poland-will-publicly-name-and-shame-companies-with-poor-cybersecurityFri, 09 Oct 2026 10:00:00 +0200After the MyDr and Medyc data breaches, Poland's government will publicly name companies that fail to secure data. What it means for boards.RegulationsSecurHUB Teamhttps://securhub.pl/en/blog/2026-10-08-atlassian-cve-2026-21589-under-active-attack-jira-and-confluencehttps://securhub.pl/en/blog/2026-10-08-atlassian-cve-2026-21589-under-active-attack-jira-and-confluenceThu, 08 Oct 2026 10:00:00 +0200Hackers are exploiting CVE-2026-21589 in Jira, Confluence and Bitbucket Data Center to steal crowd.properties credentials. Here's what to do now.VulnerabilitiesSecurHUB Teamhttps://securhub.pl/en/blog/2026-10-07-critical-atlassian-flaw-cve-2026-21589-lets-attackers-read-files-inhttps://securhub.pl/en/blog/2026-10-07-critical-atlassian-flaw-cve-2026-21589-lets-attackers-read-files-inWed, 07 Oct 2026 11:30:00 +0200CVE-2026-21589 (CVSS 9.3) affects eight Atlassian Data Center products; Cloud is already patched. Fixed versions and what to do if you can't patch yet.VulnerabilitiesSecurHUB Teamhttps://securhub.pl/en/blog/2026-10-06-asos-hacked-attackers-send-asos-hacked-push-notification-to-customershttps://securhub.pl/en/blog/2026-10-06-asos-hacked-attackers-send-asos-hacked-push-notification-to-customersTue, 06 Oct 2026 14:00:00 +0200Attackers hijacked a third-party ASOS messaging platform and pushed a threat to app users. Names and contact details may be exposed. What's the lesson?IncidentsSecurHUB Teamhttps://securhub.pl/en/blog/2026-10-05-denmark-cpr-data-breach-8-8-million-people-exposed-through-a-privatehttps://securhub.pl/en/blog/2026-10-05-denmark-cpr-data-breach-8-8-million-people-exposed-through-a-privateMon, 05 Oct 2026 09:30:00 +0200Attackers spent 10 days pulling names, addresses and CPR numbers via a partner firm's legitimate access. What it teaches about third-party access risk.IncidentsSecurHUB Teamhttps://securhub.pl/en/blog/2026-10-04-citrix-netscaler-saml-zero-day-cve-2026-88779-exploited-in-attackshttps://securhub.pl/en/blog/2026-10-04-citrix-netscaler-saml-zero-day-cve-2026-88779-exploited-in-attacksSun, 04 Oct 2026 11:00:00 +0200CVE-2026-88779 in SAML-enabled NetScaler ADC and Gateway was exploited before a patch. Attackers inject commands via the username field. Patch now.VulnerabilitiesSecurHUB Teamhttps://securhub.pl/en/blog/2026-10-03-fakturownia-data-breach-what-we-know-one-week-later-and-what-yourhttps://securhub.pl/en/blog/2026-10-03-fakturownia-data-breach-what-we-know-one-week-later-and-what-yourSat, 03 Oct 2026 10:00:00 +0200Over 600,000 customers and about 6 TB of invoices exposed. The facts on the Fakturownia breach and how to limit the damage, including notifying UODO.PolandSecurHUB Teamhttps://securhub.pl/en/blog/2026-10-02-critical-fortimail-zero-day-cve-2026-104286-exploited-in-the-wildhttps://securhub.pl/en/blog/2026-10-02-critical-fortimail-zero-day-cve-2026-104286-exploited-in-the-wildFri, 02 Oct 2026 09:00:00 +0200CVE-2026-104286 (CVSS 9.8) lets unauthenticated attackers write arbitrary files on FortiMail and is actively exploited. See patches and mitigations.VulnerabilitiesSecurHUB Teamhttps://securhub.pl/en/blog/2026-03-29-turboquant-solving-ai-s-biggest-memory-problem-for-freehttps://securhub.pl/en/blog/2026-03-29-turboquant-solving-ai-s-biggest-memory-problem-for-freeSun, 29 Mar 2026 23:27:20 +0200Modern LLMs are hitting a memory wall. TurboQuant's vector compression shrinks the KV cache fivefold without sacrificing model intelligence.AI & Machine LearningAleksander Zębrowskihttps://securhub.pl/en/blog/2026-03-24-the-litellm-supply-chain-attack-how-one-pip-install-could-havehttps://securhub.pl/en/blog/2026-03-24-the-litellm-supply-chain-attack-how-one-pip-install-could-haveTue, 24 Mar 2026 12:30:00 +0100litellm, pulled 97M times a month, shipped malware that ran without an import. Only its own bug stopped silent theft of SSH keys and cloud credentials.CybersecurityAleksander Zębrowskihttps://securhub.pl/en/blog/2026-03-12-do-you-need-antivirus-on-your-phone-our-take-on-poland-s-digitalhttps://securhub.pl/en/blog/2026-03-12-do-you-need-antivirus-on-your-phone-our-take-on-poland-s-digitalThu, 12 Mar 2026 09:55:00 +0100Poland's Digital Affairs Minister recommends phone antivirus. We explain what Android antivirus apps can and can't do, and whether you really need one.CybersecurityAleksander Zębrowskihttps://securhub.pl/en/blog/2026-02-26-how-a-hacker-used-claude-and-chatgpt-to-steal-150-gb-of-mexicanhttps://securhub.pl/en/blog/2026-02-26-how-a-hacker-used-claude-and-chatgpt-to-steal-150-gb-of-mexicanThu, 26 Feb 2026 15:48:49 +0100A hacker tricked Anthropic's Claude and OpenAI's ChatGPT into helping steal 150 GB of Mexican government data. Here's how the AI jailbreak worked.CybersecurityAleksander Zębrowskihttps://securhub.pl/en/blog/2026-02-10-ksef-2-0-scams-phantom-invoices-fake-tax-office-emails-and-how-tohttps://securhub.pl/en/blog/2026-02-10-ksef-2-0-scams-phantom-invoices-fake-tax-office-emails-and-how-toTue, 10 Feb 2026 19:29:08 +0100Mandatory KSeF is here. Learn how phantom invoices and fake tax office emails target Polish businesses, and how to protect your company from fraud.CybersecurityAleksander Zębrowskihttps://securhub.pl/en/blog/2026-01-18-tesla-patents-a-mathematical-cheat-code-32-bit-precision-on-8-bit-aihttps://securhub.pl/en/blog/2026-01-18-tesla-patents-a-mathematical-cheat-code-32-bit-precision-on-8-bit-aiSun, 18 Jan 2026 10:00:00 +0100Tesla's Mixed-Precision Bridge patent application brings 32-bit AI precision to cheap 8-bit chips. What it means for FSD, Optimus and edge AI.AnalysisAleksander Zębrowskihttps://securhub.pl/en/blog/2026-01-17-pentester-s-toolkit-2026-the-best-free-open-source-security-toolshttps://securhub.pl/en/blog/2026-01-17-pentester-s-toolkit-2026-the-best-free-open-source-security-toolsSat, 17 Jan 2026 13:55:29 +0100A complete roundup of the best free, open source penetration testing tools for 2026, from operating systems and web scanners to advanced code analysis.CybersecuritySecurHUB Teamhttps://securhub.pl/en/blog/2026-01-08-socaas-vs-in-house-soc-cost-and-roi-analysis-for-companies-in-polandhttps://securhub.pl/en/blog/2026-01-08-socaas-vs-in-house-soc-cost-and-roi-analysis-for-companies-in-polandThu, 08 Jan 2026 12:00:00 +0100In-house SOC vs. SOCaaS: costs, TCO and ROI compared, a case study, and NIS2's impact on IT budgets. Why the hybrid model wins in 2026.CybersecuritySecurHUB Teamhttps://securhub.pl/en/blog/2026-01-02-threat-hunting-how-to-stop-collecting-logs-and-start-catching-hackershttps://securhub.pl/en/blog/2026-01-02-threat-hunting-how-to-stop-collecting-logs-and-start-catching-hackersFri, 02 Jan 2026 19:26:00 +0100A practical guide to SIEM transformation: data normalization, the Pyramid of Pain and Detection as Code. Learn to detect behaviors, not just signatures.CybersecurityAleksander Zębrowskihttps://securhub.pl/en/blog/2025-12-31-mobywatel-source-code-release-poland-s-open-source-promise-turns-intohttps://securhub.pl/en/blog/2025-12-31-mobywatel-source-code-release-poland-s-open-source-promise-turns-intoWed, 31 Dec 2025 18:43:00 +0100Poland published the mObywatel app's source code, but login walls, right-click blocks and missing backend code turned openness into a facade.CybersecurityAleksander Zębrowskihttps://securhub.pl/en/blog/2025-12-23-chrome-zero-day-report-2025-what-a-record-year-of-exploitedhttps://securhub.pl/en/blog/2025-12-23-chrome-zero-day-report-2025-what-a-record-year-of-exploitedTue, 23 Dec 2025 14:01:11 +0100Eight critical Chrome zero-days in one year. How APT groups weaponized the V8 engine, and why the sandbox alone is no longer enough in 2025.CybersecurityAleksander Zębrowskihttps://securhub.pl/en/blog/2025-12-22-wormgpt-and-kawaiigpt-5-facts-about-the-dark-side-of-aihttps://securhub.pl/en/blog/2025-12-22-wormgpt-and-kawaiigpt-5-facts-about-the-dark-side-of-aiMon, 22 Dec 2025 21:21:24 +0100AI isn't only about medicine and convenience. Malicious LLMs like WormGPT and KawaiiGPT are democratizing cybercrime and crafting flawless scams.CybersecurityAleksander Zębrowskihttps://securhub.pl/en/blog/2025-12-22-isa-iec-62443-6-surprising-truths-about-industrial-cybersecurity-youhttps://securhub.pl/en/blog/2025-12-22-isa-iec-62443-6-surprising-truths-about-industrial-cybersecurity-youMon, 22 Dec 2025 19:21:12 +0100Industry 4.0 has ended the era of isolated factories. Learn how IEC 62443 upends traditional thinking about protecting critical infrastructure.CybersecurityAleksander Zębrowskihttps://securhub.pl/en/blog/2025-12-19-ai-on-the-therapist-s-couch-what-chatgpt-gemini-and-grok-think-abouthttps://securhub.pl/en/blog/2025-12-19-ai-on-the-therapist-s-couch-what-chatgpt-gemini-and-grok-think-aboutFri, 19 Dec 2025 11:42:02 +0100Can AI have trauma? Researchers put ChatGPT, Gemini and Grok through therapy sessions. The result: synthetic psychopathology and a new jailbreak risk.AnalysisAleksander Zębrowskihttps://securhub.pl/en/blog/2025-12-16-what-do-people-really-use-ai-for-5-surprising-truths-from-100https://securhub.pl/en/blog/2025-12-16-what-do-people-really-use-ai-for-5-surprising-truths-from-100Tue, 16 Dec 2025 17:24:53 +0100An analysis of 100 trillion tokens debunks AI myths: roleplay beats office productivity, and users stick to models like Cinderella's glass slipper.AnalysisAleksander Zębrowskihttps://securhub.pl/en/blog/2025-12-15-why-is-ram-so-expensive-in-2025-5-hidden-causes-behind-the-memoryhttps://securhub.pl/en/blog/2025-12-15-why-is-ram-so-expensive-in-2025-5-hidden-causes-behind-the-memoryMon, 15 Dec 2025 20:50:16 +0100Why did RAM prices skyrocket in 2025? It's not just AI. Inside the silicon physics, Samsung's strategy and the end of Windows 10.AnalysisAleksander Zębrowskihttps://securhub.pl/en/blog/2025-12-13-react2shell-aftershocks-new-react-and-next-js-vulnerabilities-openhttps://securhub.pl/en/blog/2025-12-13-react2shell-aftershocks-new-react-and-next-js-vulnerabilities-openSat, 13 Dec 2025 19:06:44 +0100Patched the CVSS 10.0 React2Shell flaw? You're not done. New React Server Components bugs bring DoS and source code exposure to Next.js apps.VulnerabilitiesAleksander Zębrowskihttps://securhub.pl/en/blog/2025-12-13-one-address-to-rule-cybersecurity-what-you-need-to-know-about-polandhttps://securhub.pl/en/blog/2025-12-13-one-address-to-rule-cybersecurity-what-you-need-to-know-about-polandSat, 13 Dec 2025 13:21:12 +0100Poland's cyber defense has two faces: the new cyber.gov.pl portal with free tools for citizens, and openly acknowledged offensive cyberweapons.CybersecurityAleksander Zębrowskihttps://securhub.pl/en/blog/2025-12-11-dom-development-data-breach-how-buying-a-home-put-families-identitieshttps://securhub.pl/en/blog/2025-12-11-dom-development-data-breach-how-buying-a-home-put-families-identitiesThu, 11 Dec 2025 17:21:28 +0100The Dom Development cyberattack exposed PESEL numbers, salaries and children's data. What leaked, what it means, and how to protect yourself now.IncidentsAleksander Zębrowskihttps://securhub.pl/en/blog/2025-12-11-poland-goes-to-war-on-disinformation-with-record-funding-in-2026https://securhub.pl/en/blog/2025-12-11-poland-goes-to-war-on-disinformation-with-record-funding-in-2026Thu, 11 Dec 2025 16:22:44 +0100Poland plans record spending to fight disinformation in 2026. Inside the government's strategy, from a huge awareness campaign to defending NASK.CybersecurityAleksander Zębrowskihttps://securhub.pl/en/blog/2025-12-09-tor-s-counter-galois-onion-cgo-upgrade-how-2025-cryptography-crusheshttps://securhub.pl/en/blog/2025-12-09-tor-s-counter-galois-onion-cgo-upgrade-how-2025-cryptography-crushesTue, 09 Dec 2025 12:00:00 +0100Tor is replacing AES-CTR relay encryption with Counter Galois Onion (CGO). What changes, why tagging attacks fail, and where it's 3x faster.CybersecurityAleksander Zębrowskihttps://securhub.pl/en/blog/2025-12-09-your-gray-checkmarks-in-whatsapp-and-signal-reveal-what-you-re-doinghttps://securhub.pl/en/blog/2025-12-09-your-gray-checkmarks-in-whatsapp-and-signal-reveal-what-you-re-doingTue, 09 Dec 2025 12:00:00 +0100Researchers show how delivery receipts in WhatsApp and Signal let anyone with your number track your screen activity and location and drain your battery.CybersecurityAleksander Zębrowskihttps://securhub.pl/en/blog/2025-12-07-react2shell-cve-2025-55182-vercel-races-to-patch-a-critical-next-jshttps://securhub.pl/en/blog/2025-12-07-react2shell-cve-2025-55182-vercel-races-to-patch-a-critical-next-jsSun, 07 Dec 2025 12:00:00 +0100Running Next.js? React2Shell (CVE-2025-55182) enables remote code execution. Here's how Vercel responded and what you need to patch right now.CybersecurityAleksander Zębrowskihttps://securhub.pl/en/blog/2025-12-10-security-operations-center-soc-the-complete-2026-guide-to-buildinghttps://securhub.pl/en/blog/2025-12-10-security-operations-center-soc-the-complete-2026-guide-to-buildingSun, 07 Dec 2025 12:00:00 +0100Your 2026 guide to the Security Operations Center: team structure, SIEM/XDR/SOAR, NIS2 requirements, deployment models and AI. For CISOs and IT leaders.CybersecurityAleksander Zębrowskihttps://securhub.pl/en/blog/2025-12-06-cloudflare-outage-technical-analysis-the-lua-bug-that-took-down-28-ofhttps://securhub.pl/en/blog/2025-12-06-cloudflare-outage-technical-analysis-the-lua-bug-that-took-down-28-ofSat, 06 Dec 2025 12:00:00 +0100Cloudflare's 25-minute outage on December 5, 2025, explained: a React CVE fix, a WAF buffer change and a fatal Lua nil-value bug.IncidentsAleksander Zębrowskihttps://securhub.pl/en/blog/2025-12-06-how-claude-code-and-autonomous-ai-agents-can-hack-your-companyhttps://securhub.pl/en/blog/2025-12-06-how-claude-code-and-autonomous-ai-agents-can-hack-your-companySat, 06 Dec 2025 12:00:00 +0100Agentic AI is rewriting the threat landscape. Learn how Claude Code was weaponized by APT groups like GTG-1002 and why Vibe Hacking matters.CybersecurityAleksander Zębrowskihttps://securhub.pl/en/blog/2025-12-05-cloudflare-down-again-the-december-5-outage-and-a-real-lifehttps://securhub.pl/en/blog/2025-12-05-cloudflare-down-again-the-december-5-outage-and-a-real-lifeFri, 05 Dec 2025 12:00:00 +0100On December 5, Cloudflare stumbled again, taking Zoom and Fortnite down with it. Plus: DownDetectorDownDetector is real, not a meme.IncidentsAleksander Zębrowskihttps://securhub.pl/en/blog/2025-12-05-critical-react-and-next-js-rce-vulnerability-cve-2025-55182-cvss-10-0https://securhub.pl/en/blog/2025-12-05-critical-react-and-next-js-rce-vulnerability-cve-2025-55182-cvss-10-0Fri, 05 Dec 2025 12:00:00 +0100A critical flaw in React Server Components (CVE-2025-55182) enables unauthenticated remote code execution and scored a maximum CVSS 10.0. Patch now.VulnerabilitiesAleksander Zębrowskihttps://securhub.pl/en/blog/2025-12-05-kids-online-in-2025-patostreams-sleepy-chicken-and-a-law-thathttps://securhub.pl/en/blog/2025-12-05-kids-online-in-2025-patostreams-sleepy-chicken-and-a-law-thatFri, 05 Dec 2025 12:00:00 +0100Over 600,000 incident reports. We break down NASK and police data on deadly TikTok challenges, Roblox scams, and Poland's sexting legal trap.AnalysisAleksander Zębrowskihttps://securhub.pl/en/blog/2025-12-02-vibe-coding-revolution-or-russian-roulette-the-dark-side-of-aihttps://securhub.pl/en/blog/2025-12-02-vibe-coding-revolution-or-russian-roulette-the-dark-side-of-aiTue, 02 Dec 2025 12:00:00 +0100Everyone's feeling the vibe, but nobody reads the code. We look at vibe coding, the rise of slopsquatting, and how AI quietly weakens app security.AnalysisAleksander Zębrowskihttps://securhub.pl/en/blog/2025-11-28-osint-in-action-how-journalists-unmasked-an-anonymous-internet-trollhttps://securhub.pl/en/blog/2025-11-28-osint-in-action-how-journalists-unmasked-an-anonymous-internet-trollFri, 28 Nov 2025 12:00:00 +010075,000 posts, a geolocated window view and... a photo of a dog. See how OSINT techniques unmasked the online hater behind "Morgenstern616".AnalysisAleksander Zębrowskihttps://securhub.pl/en/blog/2025-11-23-signal-vs-whatsapp-vs-telegram-2025-which-messenger-is-really-privatehttps://securhub.pl/en/blog/2025-11-23-signal-vs-whatsapp-vs-telegram-2025-which-messenger-is-really-privateSun, 23 Nov 2025 12:00:00 +0100Signal vs WhatsApp vs Telegram: which messenger truly protects your privacy? Encryption, metadata and backups compared, plus a step-by-step PGP guide.GuidesAleksander Zębrowskihttps://securhub.pl/en/blog/2025-11-20-operation-horizon-poland-deploys-10-000-troops-to-protect-criticalhttps://securhub.pl/en/blog/2025-11-20-operation-horizon-poland-deploys-10-000-troops-to-protect-criticalThu, 20 Nov 2025 12:00:00 +0100Poland launches Operation Horizon: 10,000 troops will guard critical infrastructure, and a new MoD app will let citizens report suspicious activity.PolandAleksander Zębrowskihttps://securhub.pl/en/blog/2025-11-20-why-your-vpn-isn-t-enough-a-deep-dive-into-online-anonymity-in-thehttps://securhub.pl/en/blog/2025-11-20-why-your-vpn-isn-t-enough-a-deep-dive-into-online-anonymity-in-theThu, 20 Nov 2025 12:00:00 +0100Encryption isn't enough. AI-driven traffic analysis, website fingerprinting and smart networks can unmask VPN and Tor users. Here's what protects you.AnalysisAleksander Zębrowskihttps://securhub.pl/en/blog/2025-11-19-anatomy-of-a-disaster-why-cloudflare-went-dark-a-technical-breakdownhttps://securhub.pl/en/blog/2025-11-19-anatomy-of-a-disaster-why-cloudflare-went-dark-a-technical-breakdownWed, 19 Nov 2025 12:00:00 +0100On November 18, 2025, Cloudflare went dark for hours. It wasn't a DDoS attack but a database permissions change. Here's the full technical breakdown.AnalysisAleksander Zębrowskihttps://securhub.pl/en/blog/2025-11-18-cloudflare-outage-of-november-18-2025-the-internet-goes-down-again-ahttps://securhub.pl/en/blog/2025-11-18-cloudflare-outage-of-november-18-2025-the-internet-goes-down-again-aTue, 18 Nov 2025 12:00:00 +0100On November 18, 2025, a Cloudflare outage took down X, ChatGPT and Zoom just a month after AWS. Here's what happened and why it matters.AnalysisAleksander Zębrowskihttps://securhub.pl/en/blog/2025-11-18-zero-day-vulnerabilities-explained-how-exploits-work-the-exploithttps://securhub.pl/en/blog/2025-11-18-zero-day-vulnerabilities-explained-how-exploits-work-the-exploitTue, 18 Nov 2025 12:00:00 +0100Zero-day vulnerabilities explained: how exploits work, the multimillion-dollar exploit market, Stuxnet and Pegasus, and how to defend in the AI era.AnalysisAleksander Zębrowskihttps://securhub.pl/en/blog/2025-11-17-akira-ransomware-has-raked-in-244-million-us-and-european-agencieshttps://securhub.pl/en/blog/2025-11-17-akira-ransomware-has-raked-in-244-million-us-and-european-agenciesMon, 17 Nov 2025 12:00:00 +0100Akira ransomware has extorted over $244M. A joint US, French, German and Dutch advisory reveals new targets (Nutanix) and Cisco, Veeam, VMware flaws.RansomwareAleksander Zębrowskihttps://securhub.pl/en/blog/2025-11-17-is-poland-s-cybercrime-bureau-cbzc-going-away-police-merge-units-intohttps://securhub.pl/en/blog/2025-11-17-is-poland-s-cybercrime-bureau-cbzc-going-away-police-merge-units-intoMon, 17 Nov 2025 12:00:00 +0100A major Polish Police overhaul: the Central Cybercrime Bureau (CBZC) merges with the CBŚP to form a new super-unit, the National Investigation Bureau.PolandAleksander Zębrowski