logo
    • Buy Crypto
    • Markets
    • Futures
    • Spot
    • Earn
    • Affiliates & AI
    • More
    1. WEEX
    2. Crypto News
    3. Researchers Discover Over 10,000 Vulnerable Public Entities in Poland

    Researchers Discover Over 10,000 Vulnerable Public Entities in Poland

    By: rootdata|2026/08/07 21:21:35
    0
    Share
    copy
    Prefer us on GooglePrefer us on Google
    NOWNOW
    00.00%--
    TRUSTTRUST
    00.00%--
    TRUSTTRUST
     

    Two Polish security researchers scanned their country's public web and found over 10,000 vulnerable entities, including airports, hospitals, and courts. They presented their findings at Def Con and revealed critical flaws in the Pad CMS system, exposing Poland to potential cyberattacks.

    • They discovered 250,000 websites with security flaws in Poland, affecting more than 10,000 public entities.
    • The unsupported Pad CMS content management system allowed access without a password to over 300 government sites.
    • The researchers identified vulnerabilities in 66% of the Polish judiciary, including 245 courts.

    Polish security researchers Robert Kruczek and Kamil Szczurowski undertook a patriotic mission to assess the security of Poland's public web. At the Def Con conference in Las Vegas, they revealed that their scan found over 10,000 vulnerable public entities, with 250,000 websites having critical flaws.

    The findings include airports, hospitals, and government offices. The duo explained that the errors were easily exploitable but were not taken seriously by the providers.

    Context: A Wave of Russian Attacks

    The research comes at a time when Poland is facing a wave of alleged Russian cyberattacks targeting its energy and water suppliers. These attacks have precisely exploited the weak cybersecurity that has now been documented.

    Kruczek and Szczurowski sought to understand the state of the public web out of patriotism and the desire to make it more secure. Their work revealed an alarming situation for a country in the midst of escalating geopolitical tensions.

    The researchers found that some errors were incredibly easy to exploit, raising the risk of public service hijacking. This situation jeopardizes the country's critical infrastructure.

    Vulnerabilities in Pad CMS

    The Pad CMS content management system, widely used by Polish websites to organize and display content, was a critical focus of vulnerabilities. The software had reached its 'end of life' and no longer received support, leaving important patches unaddressed.

    The researchers identified critical vulnerabilities in Pad CMS that allowed them to access over 300 public websites without needing a password. The developer did not patch the software because it had stopped maintaining it, leaving users unprotected.

    Another flaw found allowed them to access the websites of approximately two-thirds of the Polish judiciary, about 245 courts. This unauthorized access could enable attackers to manipulate judicial information or disrupt legal services.

    The exposure of these vulnerable systems represents a significant risk, especially in the context of cyber conflicts with Russia. Attackers could exploit these flaws to launch ransomware attacks or steal sensitive data.

    Kruczek and Szczurowski reported their findings to the Polish government through various official channels. In their talk, they stated that the effort was worth it, as a result, we are 'a little bit safer'.

    Reaction from Authorities and Providers

    The investigation highlights the lack of a security culture in Polish public administration. The absence of bug bounty programs and responsible disclosure processes discourages researchers from reporting flaws constructively.

    The researchers pointed out that some providers dismissed bug reports as 'inconveniences', an attitude that contrasts with the seriousness of the vulnerabilities. This behavior puts millions of citizens who rely on digital public services at risk.

    The Pad CMS example demonstrates the dangers of using software without active support. Many public institutions rely on outdated systems that do not receive security updates, creating backdoors for cybercriminals.

    The Polish government has intensified its cybersecurity efforts, but this study shows that there is still much work to be done. Implementing responsible disclosure policies and updating software are urgent steps.

    Implications for National Security

    The research comes at a time of high tension, with cyberattacks attributed to Russia against Polish critical infrastructure. The vulnerabilities found could be exploited by state actors to destabilize the country.

    Unauthorized access to courts, airports, and hospitals could lead to service disruptions and manipulation of judicial data. The risk is tangible and not limited to information exposure, but also includes the possibility of destructive attacks.

    The researchers demonstrated that even with basic tools, entire systems can be compromised. Their systematic scanning of the Polish public domain is a clear warning to other nations that may face similar issues.

    The response from authorities will be key to restoring trust in digital security. Measures such as creating bug bounty programs and migrating to actively maintained software are essential.

    Kruczek and Szczurowski not only identified the problems but also offered solutions. Their official report praised the effort, although they insisted that structural changes are needed to protect public services.

    Lessons for the Global Community

    The case of Poland is a reminder that cybersecurity is not a luxury but a necessity in the digital age. Public institutions must prioritize cybersecurity as part of their responsibility to citizens.

    The lack of software maintenance and the absence of reporting mechanisms are common problems in many countries. This research offers a model for assessing and improving a nation's security posture.

    Responsible disclosure by researchers is an example of how the security community can contribute to public welfare. Despite the risks, their work has reduced Poland's exposure to potential attacks.

    The recommendation is clear: governments must invest in cybersecurity, train their staff, and foster collaboration with external experts. Only then can the multiplying threats in cyberspace be mitigated.

    The work of Kruczek and Szczurowski not only protects Poland but also serves as a warning to other countries with fragile digital infrastructures. Security is an ongoing effort that requires constant attention and adequate resources.

    -- Price

    --

    This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.

    You may also like

    Why hasn't the traffic-rich Pools.trade launched a high market cap Meme coin yet?

    Why hasn't the traffic-rich Pools.trade launched a high market cap Meme coin yet?

    Robinhood Crypto Chief Explains Why There Are 'Two Wolves' Inside Robinhood Chain

    Robinhood Crypto Chief Explains Why There Are 'Two Wolves' Inside Robinhood Chain

    Bhutan Sells More 435 BTC and Transfers $280,000

    Bhutan Sells More 435 BTC and Transfers $280,000

    The Royal Government of Bhutan has once again tapped into a portion of its significant Bitcoin reserves, as the cryptocurrency seeks to stabilize around the US$ 65 million mark. This new transfer reinforces the country's strategy of using some of the BTC mined through hydropower to fund domestic pro...
    Trump Promises to Appeal to Supreme Court After Judicial Defeat Over His White House Ballroom

    Trump Promises to Appeal to Supreme Court After Judicial Defeat Over His White House Ballroom

    President Donald Trump has promised to appeal to the Supreme Court of the United States after a federal appeals court ruled that he does not have the legal authority to build his 90,000-square-foot ballroom in the White House without Congressional approval. The decision, which orders a two-week halt...
    The US says it has a Bitcoin reserve, but nobody can agree on how much it owns

    The US says it has a Bitcoin reserve, but nobody can agree on how much it owns

    Public estimates of the US Bitcoin reserve differ by 130,000 BTC, exposing an $8 billion federal accounting gap.
    Why trillion-dollar asset manager T. Rowe Price put memecoins in its crypto ETF

    Why trillion-dollar asset manager T. Rowe Price put memecoins in its crypto ETF

    Ant Group Launches AI Model with 124 Billion Parameters Surpassing Its One Trillion Giant

    Ant Group Launches AI Model with 124 Billion Parameters Surpassing Its One Trillion Giant

    Ant Group surprises the AI world with Ling-3.0-Flash, an open-weight model with 124 billion parameters that activates only 5.1 billion per token and surpasses benchmarks of its one trillion predecessor. A feat that redefines computational efficiency and the cost of implementing AI agents.
    Morgan Stanley ETF buys $15M Bitcoin during dip

    Morgan Stanley ETF buys $15M Bitcoin during dip

    Job Fragility: The Probability of Keeping a Job Has Fallen to the Lowest Level in a Decade

    Job Fragility: The Probability of Keeping a Job Has Fallen to the Lowest Level in a Decade

    The labor market is undergoing a structural deterioration that affects both the stability of those already employed and the insertion possibilities for new workers.
    Aztec bridge exploiter moves 300 ETH to Tornado Cash

    Aztec bridge exploiter moves 300 ETH to Tornado Cash

    Follow the Money: Over $3 Billion in Investments, Acquisition of Global Ledger, and a Quiet Corporate Sector

    Follow the Money: Over $3 Billion in Investments, Acquisition of Global Ledger, and a Quiet Corporate Sector

    SDE ep. 41: Bitcoin Self-Custody After ColdCard

    SDE ep. 41: Bitcoin Self-Custody After ColdCard

    [Editorial] In a Market Where Uncertainty is the Norm, 'Resilience' Ultimately Determines Success

    [Editorial] In a Market Where Uncertainty is the Norm, 'Resilience' Ultimately Determines Success

    The term that will describe the global financial market in 2026 is not interest rates, oil prices, or artificial intelligence. It is uncertainty. From the direction of U.S. monetary policy to the geopolitical situation in the Middle East, the Strait of Hormuz, tariff conflicts, energy prices, the AI...
    SharpLink Gaming and Galaxy Digital Establish On-Chain Yield Fund to Generate Active Returns through DeFi

    SharpLink Gaming and Galaxy Digital Establish On-Chain Yield Fund to Generate Active Returns through DeFi

    "A Golden Opportunity for Bitcoin" … Besant's Gamble Shakes the Forex Market

    "A Golden Opportunity for Bitcoin" … Besant's Gamble Shakes the Forex Market

    Divergence of Regulatory Token Protocol Standards: Issuance, Compliance, and Integration Each Play Their Role

    Divergence of Regulatory Token Protocol Standards: Issuance, Compliance, and Integration Each Play Their Role

    Franklin Templeton Joins the Exclusive Circle of Super Validators on Canton Network

    Franklin Templeton Joins the Exclusive Circle of Super Validators on Canton Network

    Franklin Templeton joins Canton Network as a Super Validator, a status reserved for select institutions to lead the institutional blockchain.
    Firmus to Accelerate Asia-Pacific Growth with $2 Billion Investment

    Firmus to Accelerate Asia-Pacific Growth with $2 Billion Investment

    🚨 Firmus will accelerate its Asia-Pacific growth with a $2 billion investment. 🧠 The company signed a multi-year agreement for approximately 18,400 NVIDIA GB300 GPUs for its Melbourne facility. ₿ Firmus is shifting focus from developing cooling technologies for Bitcoin mining to artificial intelli...
    Korean Stock Market AI Bull Run Retreats, Leveraged Investors Face Massive Withdrawals

    Korean Stock Market AI Bull Run Retreats, Leveraged Investors Face Massive Withdrawals

    Cybersecurity: Crypto Stealer for macOS, Wi-Fi Surveillance in Hotels, and Major Leaks of the Week

    Cybersecurity: Crypto Stealer for macOS, Wi-Fi Surveillance in Hotels, and Major Leaks of the Week

    Cybersecurity has once again taken center stage this week: a weak seed phrase generator led to the theft of millions of dollars in cryptocurrency, a new malware for macOS has learned to discreetly siphon off only part of the funds from wallets, and attacks on hotel Wi-Fi networks were used to hunt f...
    Stablecoin: 300M users, apps like Rizon bring dollar services to 122 countries

    Stablecoin: 300M users, apps like Rizon bring dollar services to 122 countries

    Retail cryptocurrency trading has cooled off, but the dollar-pegged tokens underlying it are having their best year yet.
    FBI Agent Uses Mnemonic to Steal Millions in Cryptocurrency

    FBI Agent Uses Mnemonic to Steal Millions in Cryptocurrency

    Wall Street's Sharp Commentary on Non-Farm Payrolls: This Report is Terrifying

    Wall Street's Sharp Commentary on Non-Farm Payrolls: This Report is Terrifying

    Century-Old Asset Logic Favors SpaceX

    Century-Old Asset Logic Favors SpaceX

    Anxiety and Anticipation: SK Hynix's Stock Price Declines but Remains Favorably Viewed by Institutions, Market Focuses on HBM4 Technology Moat

    Anxiety and Anticipation: SK Hynix's Stock Price Declines but Remains Favorably Viewed by Institutions, Market Focuses on HBM4 Technology Moat

    Moonshot AI Restructures Equity and Introduces State-Owned Investors to Obtain Regulatory Approval for Hong Kong Listing

    Moonshot AI Restructures Equity and Introduces State-Owned Investors to Obtain Regulatory Approval for Hong Kong Listing

    Tips for Making the Most of Your Dollars in the United States: Keys to Avoid Overspending on Your Trip

    Tips for Making the Most of Your Dollars in the United States: Keys to Avoid Overspending on Your Trip

    Good planning before departure and small daily decisions can make a significant difference in the budget during your stay.
    Essential Guide for Entrepreneurs: Hong Kong Government Offers Startup Subsidies of Up to HKD 1 Million

    Essential Guide for Entrepreneurs: Hong Kong Government Offers Startup Subsidies of Up to HKD 1 Million

    Central Bank imposes 24-hour hold on cryptocurrency transfers

    Central Bank imposes 24-hour hold on cryptocurrency transfers

    The Central Bank of Brazil published on Friday (7) Resolution BCB No. 584, which expands fraud prevention rules to also cover the provision of virtual asset services in the country. The regulation amends Resolution BCB No. 142 from 2021, which previously dealt with procedures and controls for fraud ...
    Bitcoin’s AI security sprint found 6,700 issues in 55 hours, but no one knows how many are real

    Bitcoin’s AI security sprint found 6,700 issues in 55 hours, but no one knows how many are real

    Bitcoin Red Team generated 6,700 findings in 55 hours, showing how quickly AI can flood security teams with issues to verify and fix.

    Why hasn't the traffic-rich Pools.trade launched a high market cap Meme coin yet?

    Robinhood Crypto Chief Explains Why There Are 'Two Wolves' Inside Robinhood Chain

    Bhutan Sells More 435 BTC and Transfers $280,000

    The Royal Government of Bhutan has once again tapped into a portion of its significant Bitcoin reserves, as the cryptocurrency seeks to stabilize around the US$ 65 million mark. This new transfer reinforces the country's strategy of using some of the BTC mined through hydropower to fund domestic pro...

    Trump Promises to Appeal to Supreme Court After Judicial Defeat Over His White House Ballroom

    President Donald Trump has promised to appeal to the Supreme Court of the United States after a federal appeals court ruled that he does not have the legal authority to build his 90,000-square-foot ballroom in the White House without Congressional approval. The decision, which orders a two-week halt...

    The US says it has a Bitcoin reserve, but nobody can agree on how much it owns

    Public estimates of the US Bitcoin reserve differ by 130,000 BTC, exposing an $8 billion federal accounting gap.

    Why trillion-dollar asset manager T. Rowe Price put memecoins in its crypto ETF

    ...
    Exclusive new user rewards
    Sign up to get 10 USDT
    Exclusive new user rewardsSign up

    Contents

    NOW

    Latest articles

    2026/08/08

    Job Fragility: The Probability of Keeping a Job Has Fallen to the Lowest Level in a Decade

    The labor market is undergoing a structural deterioration that affects both the stability of those already employed and the insertion possibilities for new workers.
    POWERPOWER
    00.00%--
    NOWNOW
    00.00%--
    ERAERA
    00.00%--
    2026/08/08

    Aztec bridge exploiter moves 300 ETH to Tornado Cash

    AZTECAZTEC
    00.00%--
    SENTSENT
    00.00%--
    NOWNOW
    00.00%--
    2026/08/08

    Stablecoin: 300M users, apps like Rizon bring dollar services to 122 countries

    Retail cryptocurrency trading has cooled off, but the dollar-pegged tokens underlying it are having their best year yet.
    BRIANBRIAN
    00.00%--
    FASTFAST
    00.00%--
    NOWNOW
    00.00%--
    BASEDBASED
    00.00%--
    2026/08/07

    Central Bank imposes 24-hour hold on cryptocurrency transfers

    The Central Bank of Brazil published on Friday (7) Resolution BCB No. 584, which expands fraud prevention rules to also cover the provision of virtual asset services in the country. The regulation amends Resolution BCB No. 142 from 2021, which previously dealt with procedures and controls for fraud ...
    NOWNOW
    00.00%--
    BASEDBASED
    00.00%--
    2026/08/07

    Bitcoin’s AI security sprint found 6,700 issues in 55 hours, but no one knows how many are real

    Bitcoin Red Team generated 6,700 findings in 55 hours, showing how quickly AI can flood security teams with issues to verify and fix.
    OPENAIOPENAI
    00.00%--
    NOWNOW
    00.00%--
    REALREAL
    00.00%--
    More

    Latest coin listings on WEEX

    logoCommunity
    iconiconiconiconiconiconicon
    Customer Support:@weikecs
    Business Cooperation:@weikecs
    Quant Trading & MM:bd@weex.com
    VIP Program:support@weex.com
    • About Us
    • Announcement Center
    • Media Kit
    • WEEX Community
    • WXT Zone
    • Announcement
    • Legal Statement
    • Risk Disclosure
    • Terms and Policies
    • Privacy Policy
    • Whistleblower Notice
    • AML/CTF Policy
    • Law Enforcement
    • User Guide
    • Product Launches
    • Crypto News
    • Product Launches
    • Crypto Wiki
    • Learn
    • Q&A
    • Spot
    • Futures
    • Glossary
    • VIP Program
    • Download
    • Affiliate
    • Protection Fund
    • Proof of Reserves
    • Sitemap
    • ETFs
    • Crypto Prices
    • Price Predictions
    • WXT Price
    • BTC Price
    • ETH Price
    • DOGE Price
    • How to Buy Crypto
    • How to Buy WXT
    • How to Buy BTC
    • How to Buy ETH
    • How to Buy DOGE
    • Help Center
    • Fee Schedule
    • Trading Rules
    • WEEX Academy
    • Contact Verifier
    • Submit Feedback
    • About Us
    • Announcement Center
    • Media Kit
    • WEEX Community
    • WXT Zone
    • Announcement
    • Help Center
    • Fee Schedule
    • Trading Rules
    • WEEX Academy
    • Contact Verifier
    • Submit Feedback
    • Customer Support Bot
    • VIP Services
    • Legal Statement
    • Risk Disclosure
    • Terms and Policies
    • Privacy Policy
    • Whistleblower Notice
    • AML/CTF Policy
    • Law Enforcement
    • Proof of Reserves
    • Invite Friends
    • OTC
    • Download
    • Affiliate
    • VIP Program
    • API
    • Broker
    • Listing Application
    • Affiliate T&C
    • Sitemap
    • Futures
    • Spot
    • Copy Trade
    • Markets
    • WEEX Store
    • User Guide
    • Product Launches
    • Crypto News
    • Product Launches
    • Crypto Wiki
    • Learn
    • Q&A
    • Spot
    • Futures
    • Glossary
    • VIP Program
    • Download
    • Affiliate
    • Protection Fund
    • Proof of Reserves
    • Sitemap
    • ETFs
    • Crypto Prices
    • Price Predictions
    • WXT Price
    • BTC Price
    • ETH Price
    • DOGE Price
    • How to Buy Crypto
    • How to Buy WXT
    • How to Buy BTC
    • How to Buy ETH
    • How to Buy DOGE
    • About Us
    • Announcement Center
    • Media Kit
    • WEEX Community
    • WXT Zone
    • Announcement
    • Help Center
    • Fee Schedule
    • Trading Rules
    • WEEX Academy
    • Contact Verifier
    • Submit Feedback
    • Legal Statement
    • Risk Disclosure
    • Terms and Policies
    • Privacy Policy
    • Whistleblower Notice
    • AML/CTF Policy
    • Law Enforcement
    • Customer Support Bot
    • VIP Services
    • Futures
    • Spot
    • Copy Trade
    • Markets
    • WEEX Store
    • Proof of Reserves
    • Invite Friends
    • OTC
    • Download
    • Affiliate
    • VIP Program
    • API
    • Broker
    • Listing Application
    • Affiliate T&C
    • Sitemap
    • User Guide
    • Product Launches
    • Crypto News
    • Product Launches
    • Crypto Wiki
    • Learn
    • Q&A
    • Spot
    • Futures
    • Glossary
    • VIP Program
    • Download
    • Affiliate
    • Protection Fund
    • Proof of Reserves
    • Sitemap
    • ETFs
    • Crypto Prices
    • Price Predictions
    • WXT Price
    • BTC Price
    • ETH Price
    • DOGE Price
    • How to Buy Crypto
    • How to Buy WXT
    • How to Buy BTC
    • How to Buy ETH
    • How to Buy DOGE

    Where new wealth is made

    Download app

    Sign Up
    h5 logo
    Download