Polish Security Researchers Find Vulnerabilities Across Public Infrastructure
Two Polish security researchers revealed that over 10,000 public entities and 250,000 websites, including airports and hospitals, contain critical cybersecurity flaws. Presented at the Def Con conference in Las Vegas, the findings highlight severe risks from buggy vendor software and poor reporting channels. This discovery arrives as Poland attempts to strengthen defenses against suspected foreign cyberattacks.
Key points
- Polish security researchers Robert Kruczek and Kamil Szczurowski uncovered security flaws affecting more than 10,000 public entities and 250,000 websites.
- The vulnerable infrastructure includes critical public services such as airports, hospitals, courts, and government offices.
- The researchers presented their findings on Friday at the Def Con cybersecurity conference held in Las Vegas.
- Critical vulnerabilities were identified in widely used platforms like the Pad CMS content management system.
- The discovery coincides with Polish efforts to reinforce cyber defenses following suspected Russian attacks on energy and water providers.
Two Polish security researchers have discovered widespread cybersecurity vulnerabilities affecting thousands of public agencies and websites across Poland. Speaking at the Def Con cybersecurity conference in Las Vegas on Friday, researchers Robert Kruczek and Kamil Szczurowski revealed that their investigation uncovered security flaws across more than 10,000 public entities and 250,000 websites.
The vulnerable digital infrastructure includes essential public services such as hospitals, airports, courts, and government offices. According to the researchers, the risks stem largely from buggy vendor software, a lack of bug bounty programs, and inadequate reporting mechanisms for security flaws. They noted that certain vulnerabilities were exceptionally easy to exploit yet frequently dismissed by vendors as minor inconveniences.
This security assessment emerges as Poland works to bolster its national cyber defenses following a series of suspected Russian cyberattacks targeting domestic energy and water infrastructure. Many of those previous incidents successfully exploited weak cybersecurity practices across targeted networks. The findings underscore ongoing challenges in securing public sector digital assets against increasingly sophisticated threats.
Sources
The WireByte editorial team synthesises technology news from multiple primary sources, verifies the facts, and links every source. Articles are produced with AI assistance and reviewed under our editorial policy.