logo
    • Buy Crypto
    • Markets
    • Futures
    • Spot
    • Earn
    • Affiliates & AI
    • More
    1. WEEX
    2. Crypto News
    3. Researchers Discover Over 10,000 Vulnerable Public Entities in Poland

    Researchers Discover Over 10,000 Vulnerable Public Entities in Poland

    By: rootdata|2026/08/07 21:21:35
    0
    Share
    copy
    Prefer us on GooglePrefer us on Google
    NOWNOW
    00.00%--
    TRUSTTRUST
    00.00%--
    TRUSTTRUST
     

    Two Polish security researchers scanned their country's public web and found over 10,000 vulnerable entities, including airports, hospitals, and courts. They presented their findings at Def Con and revealed critical flaws in the Pad CMS system, exposing Poland to potential cyberattacks.

    • They discovered 250,000 websites with security flaws in Poland, affecting more than 10,000 public entities.
    • The unsupported Pad CMS content management system allowed access without a password to over 300 government sites.
    • The researchers identified vulnerabilities in 66% of the Polish judiciary, including 245 courts.

    Polish security researchers Robert Kruczek and Kamil Szczurowski undertook a patriotic mission to assess the security of Poland's public web. At the Def Con conference in Las Vegas, they revealed that their scan found over 10,000 vulnerable public entities, with 250,000 websites having critical flaws.

    The findings include airports, hospitals, and government offices. The duo explained that the errors were easily exploitable but were not taken seriously by the providers.

    Context: A Wave of Russian Attacks

    The research comes at a time when Poland is facing a wave of alleged Russian cyberattacks targeting its energy and water suppliers. These attacks have precisely exploited the weak cybersecurity that has now been documented.

    Kruczek and Szczurowski sought to understand the state of the public web out of patriotism and the desire to make it more secure. Their work revealed an alarming situation for a country in the midst of escalating geopolitical tensions.

    The researchers found that some errors were incredibly easy to exploit, raising the risk of public service hijacking. This situation jeopardizes the country's critical infrastructure.

    Vulnerabilities in Pad CMS

    The Pad CMS content management system, widely used by Polish websites to organize and display content, was a critical focus of vulnerabilities. The software had reached its 'end of life' and no longer received support, leaving important patches unaddressed.

    The researchers identified critical vulnerabilities in Pad CMS that allowed them to access over 300 public websites without needing a password. The developer did not patch the software because it had stopped maintaining it, leaving users unprotected.

    Another flaw found allowed them to access the websites of approximately two-thirds of the Polish judiciary, about 245 courts. This unauthorized access could enable attackers to manipulate judicial information or disrupt legal services.

    The exposure of these vulnerable systems represents a significant risk, especially in the context of cyber conflicts with Russia. Attackers could exploit these flaws to launch ransomware attacks or steal sensitive data.

    Kruczek and Szczurowski reported their findings to the Polish government through various official channels. In their talk, they stated that the effort was worth it, as a result, we are 'a little bit safer'.

    Reaction from Authorities and Providers

    The investigation highlights the lack of a security culture in Polish public administration. The absence of bug bounty programs and responsible disclosure processes discourages researchers from reporting flaws constructively.

    The researchers pointed out that some providers dismissed bug reports as 'inconveniences', an attitude that contrasts with the seriousness of the vulnerabilities. This behavior puts millions of citizens who rely on digital public services at risk.

    The Pad CMS example demonstrates the dangers of using software without active support. Many public institutions rely on outdated systems that do not receive security updates, creating backdoors for cybercriminals.

    The Polish government has intensified its cybersecurity efforts, but this study shows that there is still much work to be done. Implementing responsible disclosure policies and updating software are urgent steps.

    Implications for National Security

    The research comes at a time of high tension, with cyberattacks attributed to Russia against Polish critical infrastructure. The vulnerabilities found could be exploited by state actors to destabilize the country.

    Unauthorized access to courts, airports, and hospitals could lead to service disruptions and manipulation of judicial data. The risk is tangible and not limited to information exposure, but also includes the possibility of destructive attacks.

    The researchers demonstrated that even with basic tools, entire systems can be compromised. Their systematic scanning of the Polish public domain is a clear warning to other nations that may face similar issues.

    The response from authorities will be key to restoring trust in digital security. Measures such as creating bug bounty programs and migrating to actively maintained software are essential.

    Kruczek and Szczurowski not only identified the problems but also offered solutions. Their official report praised the effort, although they insisted that structural changes are needed to protect public services.

    Lessons for the Global Community

    The case of Poland is a reminder that cybersecurity is not a luxury but a necessity in the digital age. Public institutions must prioritize cybersecurity as part of their responsibility to citizens.

    The lack of software maintenance and the absence of reporting mechanisms are common problems in many countries. This research offers a model for assessing and improving a nation's security posture.

    Responsible disclosure by researchers is an example of how the security community can contribute to public welfare. Despite the risks, their work has reduced Poland's exposure to potential attacks.

    The recommendation is clear: governments must invest in cybersecurity, train their staff, and foster collaboration with external experts. Only then can the multiplying threats in cyberspace be mitigated.

    The work of Kruczek and Szczurowski not only protects Poland but also serves as a warning to other countries with fragile digital infrastructures. Security is an ongoing effort that requires constant attention and adequate resources.

    -- Price

    --

    This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.

    You may also like

    Grayscale pulls 3 altcoin ETF filings in 190 seconds

    Grayscale pulls 3 altcoin ETF filings in 190 seconds

    Analysis Guide on CoreWeave's Latest Backlog|Pre-Earnings Risk Assessment and Cryptocurrency Impact Forecast

    Analysis Guide on CoreWeave's Latest Backlog|Pre-Earnings Risk Assessment and Cryptocurrency Impact Forecast

    Get ahead of CoreWeave's August 2026 outlook! Compare the Q1 backlog of $99.4 billion with the latest market forecast of $25.5 billion and don't miss investment opportunities.
    Explaining Why Iran's Toll Plan Threatens the No-Tolls Hormuz Agreement

    Explaining Why Iran's Toll Plan Threatens the No-Tolls Hormuz Agreement

    While the Iranian Parliament considers a 7% toll in the Strait of Hormuz, the Foreign Ministry is finalizing a toll-free route with Oman. Stay informed and consider optimal responses now.
    Everyone Thinks Cryptocurrency is Dead, But He Says It's About to Explode

    Everyone Thinks Cryptocurrency is Dead, But He Says It's About to Explode

    Bitget UEX Daily Report | Berkshire Ends Net Selling Cycle, Cash Heavy on Google; No Selling Pressure After First Unlock, SpaceX (SPCX.US) Soars for Second Consecutive Trading Day (August 10, 2026)

    Bitget UEX Daily Report | Berkshire Ends Net Selling Cycle, Cash Heavy on Google; No Selling Pressure After First Unlock, SpaceX (SPCX.US) Soars for Second Consecutive Trading Day (August 10, 2026)

    CLARITY Act: 'Not a Deadlock but a Time to Buy' ... Esper Says It's Necessary for U.S. Financial Security

    CLARITY Act: 'Not a Deadlock but a Time to Buy' ... Esper Says It's Necessary for U.S. Financial Security

    Carnivorous Bacteria in the Gulf: Louisiana Reports Five Deaths and Urges Caution

    Carnivorous Bacteria in the Gulf: Louisiana Reports Five Deaths and Urges Caution

    Louisiana is facing an unusual increase in infections caused by Vibrio vulnificus, with nine cases and five deaths reported this year. The heat and climate change are expanding this deadly bacteria northward, and authorities are urging caution for swimmers.
    Wintermute Obtains Broker-Dealer Qualification from SEC and FINRA, Expanding into the U.S. Securities Market

    Wintermute Obtains Broker-Dealer Qualification from SEC and FINRA, Expanding into the U.S. Securities Market

    Oil Industry Profits: The Impact of Geopolitics on the Giants' Cash Flow

    Oil Industry Profits: The Impact of Geopolitics on the Giants' Cash Flow

    Financing Weekly Report | Mastercard Acquires Stablecoin Infrastructure Company BVNK; Yellow Card Completes $40 Million Strategic Financing with Participation from Standard Chartered and Sony

    Financing Weekly Report | Mastercard Acquires Stablecoin Infrastructure Company BVNK; Yellow Card Completes $40 Million Strategic Financing with Participation from Standard Chartered and Sony

    Can Reinsurance Become an On-Chain Revenue Source? Alea Research Highlights Re's RWA-DeFi Integration Model

    Can Reinsurance Become an On-Chain Revenue Source? Alea Research Highlights Re's RWA-DeFi Integration Model

    The attempt to transplant reinsurance as a real-world asset (RWA) onto the blockchain is emerging as a new revenue source in the DeFi market. Alea Research recently analyzed that the Re protocol has established a structure that connects stablecoin liquidity with regulated reinsurance collateral, pro...
    U.S. Taxpayers' Cryptocurrency Reporting Stays Between 32% and 56%: Study

    U.S. Taxpayers' Cryptocurrency Reporting Stays Between 32% and 56%: Study

    Astros and Wallus Release Open Standard for Verifiable Trading Data WVTS

    Astros and Wallus Release Open Standard for Verifiable Trading Data WVTS

    An open standard for trading data necessary for the spread of AI agent-based trading has been released. Astros, the representative decentralized exchange for perpetual futures in the Sui ecosystem, announced the unveiling of the 'Wallus Verifiable Trading Data Standard (WVTS)'.
    NYSE Develops On-Chain Payment Platform for Tokenized Securities

    NYSE Develops On-Chain Payment Platform for Tokenized Securities

    5 Charts to Understand Crypto Payment Cards: Stablecoins Transition from Blockchain to Real-World Spending

    5 Charts to Understand Crypto Payment Cards: Stablecoins Transition from Blockchain to Real-World Spending

    Ethereum Dominates RWA, While Solana Gains More Space in Trading

    Ethereum Dominates RWA, While Solana Gains More Space in Trading

    Ethereum maintains its leading position in the global market for Real World Asset (RWA) tokenization, while Solana emerges as a major alternative network in the spot trading of these assets.
    Wall Street Conspiracy Theory: Did Waller Intentionally Raise Long-Term U.S. Treasury Yields?

    Wall Street Conspiracy Theory: Did Waller Intentionally Raise Long-Term U.S. Treasury Yields?

    Vitalik Buterin Supports Signal's Phone Number Concealment Feature

    Vitalik Buterin Supports Signal's Phone Number Concealment Feature

    Investigation into Zhou, known as 'Bobby', linked to $10 billion WLFI purchase

    Investigation into Zhou, known as 'Bobby', linked to $10 billion WLFI purchase

    Guren “Bobby” Zhou, identified as the entrepreneur behind Aqua 1, which purchased $100 million worth of WLFI tokens, is still under investigation in a money laundering case in the UK.
    Cryptocurrency in the Second Week of August | Financial Services Agency Standardizes Cyber Attack Reporting Format

    Cryptocurrency in the Second Week of August | Financial Services Agency Standardizes Cyber Attack Reporting Format

    Streaming Platforms: How to Use Your Dollars to Pay Less and Avoid Excessive Taxes

    Streaming Platforms: How to Use Your Dollars to Pay Less and Avoid Excessive Taxes

    Reviewing subscriptions, eliminating duplicate services, and choosing the best way to settle accounts can reduce monthly household expenses.
    Trump and Islamophobia: The Chorus That No Longer Mobilizes Votes

    Trump and Islamophobia: The Chorus That No Longer Mobilizes Votes

    President Trump has maintained his hostile rhetoric and policies towards Muslims, but Islamophobia no longer serves as a political weapon. Muslim voters are divided, Democrats have changed their language, and relations with Arab governments complicate the narrative.
    Situational Awareness Bets US$ 400 Million on Chips After Losing Half of Its Fund

    Situational Awareness Bets US$ 400 Million on Chips After Losing Half of Its Fund

    China Runs Out of Chinese Data to Train AI: The New Wall Is Not Chips

    China Runs Out of Chinese Data to Train AI: The New Wall Is Not Chips

    China faces a new bottleneck in the AI race: the shortage of training data in Chinese. While chips dominate the debate, experts warn that the 1.3% of web content in Chinese could hinder the development of AI models in the country.
    XRP: ETFs Continue to Rise, but the Market Shows Signs of Fragility

    XRP: ETFs Continue to Rise, but the Market Shows Signs of Fragility

    World Liberty received $100 million from businessman investigated for money laundering: NYT

    World Liberty received $100 million from businessman investigated for money laundering: NYT

    Amazon Plans Power Plant That Could Be the Largest Polluter in the U.S.

    Amazon Plans Power Plant That Could Be the Largest Polluter in the U.S.

    XRP Ledger retires 5 amendments, users unaffected

    XRP Ledger retires 5 amendments, users unaffected

    Michael Saylor reveals how ChatGPT helped Strategy unlock $15 billion for its Bitcoin machine

    Michael Saylor reveals how ChatGPT helped Strategy unlock $15 billion for its Bitcoin machine

    Strategy used AI to design preferred stocks like STRC, raising about $10.5 billion through one instrument and roughly $15 billion overall.
    ADA Airdrop Guide: How to Claim 50,000 USDT Rewards on WEEX

    ADA Airdrop Guide: How to Claim 50,000 USDT Rewards on WEEX

    Join the WEEX ADA Airdrop and learn how to complete deposit, spot trading, referral, and futures tasks to share 50,000 USDT rewards.

    Grayscale pulls 3 altcoin ETF filings in 190 seconds

    Analysis Guide on CoreWeave's Latest Backlog|Pre-Earnings Risk Assessment and Cryptocurrency Impact Forecast

    Get ahead of CoreWeave's August 2026 outlook! Compare the Q1 backlog of $99.4 billion with the latest market forecast of $25.5 billion and don't miss investment opportunities.

    Explaining Why Iran's Toll Plan Threatens the No-Tolls Hormuz Agreement

    While the Iranian Parliament considers a 7% toll in the Strait of Hormuz, the Foreign Ministry is finalizing a toll-free route with Oman. Stay informed and consider optimal responses now.

    Everyone Thinks Cryptocurrency is Dead, But He Says It's About to Explode

    Bitget UEX Daily Report | Berkshire Ends Net Selling Cycle, Cash Heavy on Google; No Selling Pressure After First Unlock, SpaceX (SPCX.US) Soars for Second Consecutive Trading Day (August 10, 2026)

    CLARITY Act: 'Not a Deadlock but a Time to Buy' ... Esper Says It's Necessary for U.S. Financial Security

    ...
    Exclusive new user rewards
    Sign up to get 10 USDT
    Exclusive new user rewardsSign up

    Contents

    NOW

    Latest articles

    2026/08/10

    NYSE Develops On-Chain Payment Platform for Tokenized Securities

    NOWNOW
    00.00%--
    TRUSTTRUST
    00.00%--
    2026/08/09

    XRP: ETFs Continue to Rise, but the Market Shows Signs of Fragility

    SPOTSPOT
    00.00%--
    NOWNOW
    00.00%--
    THETHE
    00.00%--
    ACTACT
    00.00%--
    2026/08/09

    Amazon Plans Power Plant That Could Be the Largest Polluter in the U.S.

    POWERPOWER
    00.00%--
    NOWNOW
    00.00%--
    COSTCOST
    00.00%--
    METAMETA
    00.00%--
    2026/08/09

    Researchers Showcase Adversarial Patterns to Disrupt Surveillance Recognition

    BILLBILL
    00.00%--
    NOWNOW
    00.00%--
    POWERPOWER
    00.00%--
    2026/08/09

    What happens when a stablecoin depegs for 30 seconds

    NOWNOW
    00.00%--
    SPACESPACE
    00.00%--
    COSTCOST
    00.00%--
    GENIUSGENIUS
    00.00%--
    More

    Latest coin listings on WEEX

    logoCommunity
    iconiconiconiconiconiconicon
    Customer Support:@weikecs
    Business Cooperation:@weikecs
    Quant Trading & MM:bd@weex.com
    VIP Program:support@weex.com
    • About Us
    • Announcement Center
    • Media Kit
    • WEEX Community
    • WXT Zone
    • Announcement
    • Legal Statement
    • Risk Disclosure
    • Terms and Policies
    • Privacy Policy
    • Whistleblower Notice
    • AML/CTF Policy
    • Law Enforcement
    • User Guide
    • Product Launches
    • Crypto News
    • Product Launches
    • Crypto Wiki
    • Learn
    • Q&A
    • Spot
    • Futures
    • Glossary
    • VIP Program
    • Download
    • Affiliate
    • Protection Fund
    • Proof of Reserves
    • Sitemap
    • ETFs
    • Crypto Prices
    • Price Predictions
    • WXT Price
    • BTC Price
    • ETH Price
    • DOGE Price
    • How to Buy Crypto
    • How to Buy WXT
    • How to Buy BTC
    • How to Buy ETH
    • How to Buy DOGE
    • Help Center
    • Fee Schedule
    • Trading Rules
    • WEEX Academy
    • Contact Verifier
    • Submit Feedback
    • About Us
    • Announcement Center
    • Media Kit
    • WEEX Community
    • WXT Zone
    • Announcement
    • Help Center
    • Fee Schedule
    • Trading Rules
    • WEEX Academy
    • Contact Verifier
    • Submit Feedback
    • Customer Support Bot
    • VIP Services
    • Legal Statement
    • Risk Disclosure
    • Terms and Policies
    • Privacy Policy
    • Whistleblower Notice
    • AML/CTF Policy
    • Law Enforcement
    • Proof of Reserves
    • Invite Friends
    • OTC
    • Download
    • Affiliate
    • VIP Program
    • API
    • Broker
    • Listing Application
    • Affiliate T&C
    • Sitemap
    • Futures
    • Spot
    • Copy Trade
    • Markets
    • WEEX Store
    • User Guide
    • Product Launches
    • Crypto News
    • Product Launches
    • Crypto Wiki
    • Learn
    • Q&A
    • Spot
    • Futures
    • Glossary
    • VIP Program
    • Download
    • Affiliate
    • Protection Fund
    • Proof of Reserves
    • Sitemap
    • ETFs
    • Crypto Prices
    • Price Predictions
    • WXT Price
    • BTC Price
    • ETH Price
    • DOGE Price
    • How to Buy Crypto
    • How to Buy WXT
    • How to Buy BTC
    • How to Buy ETH
    • How to Buy DOGE
    • About Us
    • Announcement Center
    • Media Kit
    • WEEX Community
    • WXT Zone
    • Announcement
    • Help Center
    • Fee Schedule
    • Trading Rules
    • WEEX Academy
    • Contact Verifier
    • Submit Feedback
    • Legal Statement
    • Risk Disclosure
    • Terms and Policies
    • Privacy Policy
    • Whistleblower Notice
    • AML/CTF Policy
    • Law Enforcement
    • Customer Support Bot
    • VIP Services
    • Futures
    • Spot
    • Copy Trade
    • Markets
    • WEEX Store
    • Proof of Reserves
    • Invite Friends
    • OTC
    • Download
    • Affiliate
    • VIP Program
    • API
    • Broker
    • Listing Application
    • Affiliate T&C
    • Sitemap
    • User Guide
    • Product Launches
    • Crypto News
    • Product Launches
    • Crypto Wiki
    • Learn
    • Q&A
    • Spot
    • Futures
    • Glossary
    • VIP Program
    • Download
    • Affiliate
    • Protection Fund
    • Proof of Reserves
    • Sitemap
    • ETFs
    • Crypto Prices
    • Price Predictions
    • WXT Price
    • BTC Price
    • ETH Price
    • DOGE Price
    • How to Buy Crypto
    • How to Buy WXT
    • How to Buy BTC
    • How to Buy ETH
    • How to Buy DOGE

    Where new wealth is made

    Download app

    Sign Up
    h5 logo
    Download