NIS2 penalties in 2026: what you really risk
Short answer Penalties for non-compliance with NIS2/KSC in Poland: an essential entity up to 10M EUR or 2% of annual turnover (min. PLN 20,000), an important entity up to 7M EUR or 1.4% (min
Read more →Blog & Insights
Precyzyjna wiedza
o ciemnych systemach.
Ekspercka analiza i studia przypadków dla decydentów. Nawigacja po złożonościach nowoczesnej infrastruktury cyfrowej z niekompromisowymi standardami bezpieczeństwa.
Latest article
More articles
Does my company fall under NIS2? Qualification in 5 steps
Short answer Your company is likely in scope of NIS2/KSC if it is at least a medium-sized enterprise (roughly from ~50 employees or ~10M EUR turnover) and operates in a sector from the annex
CVE-2026-33824: double-free in Windows IKE = RCE risk
CVE-2026-33824: why a double-free in Windows IKE services is a critical RCE risk for your business right now? BLUF Microsoft has confirmed active exploitation of CVE-2026-33824 — a double-fr
CVE-2025-60710 in Windows Task Host: ransomware threat
CVE-2025-60710 in Windows Task Host: should your company prioritize this before ransomware actors exploit it? BLUF CISA has confirmed that ransomware gangs are actively exploiting CVE-2025-6
Defender "ShieldBreak" (CVE-2026-69414): zero-day EoP
Is Your Microsoft Defender a Bypass Vector? CVE-2026-69414 "ShieldBreak" — Zero-Day EoP in the Malware Protection Engine Bypassing the CVE-2026-50656 Patch BLUF On August 14, 2026, Microsoft
Medusa Ransomware (CISA AA25-071A): 500+ victims, 24h exploit
Medusa Ransomware (CISA AA25-071A, updated Aug 18, 2026): 500+ victims, 24-hour exploit window and what healthcare & manufacturing should do in 30/90 days > Meta_title (EN): „Medusa ransomwa
ToolShell/Warlock: supply-chain attack on on-prem SharePoint
ToolShell and Warlock: why a supply-chain attack on on-prem SharePoint hit 400+ servers across 148 organizations — and what it means for your business? BLUF In July 2025 China-linked actors
CVE-2026-55040 SharePoint auth bypass: act in 24h
CVE-2026-55040: how a SharePoint authentication bypass (CVSS 9.1) lets attackers take over an admin account without a password? BLUF Microsoft SharePoint has a critical flaw CVE-2026-55040 (
MyDr breach: how a cyberattack on Polish medical software affects nearly 19M patients — and what it means for your business
MyDr: how a cyberattack on Polish medical software could affect nearly 19 million patients — and what it means for your business? BLUF (short answer): On August 17, 2026, Polish authorities
Is your Cisco ASA / FTD with SSL VPN under a credible DoS attack today? (CVE-2026-20349, CISA BOD 26-04 dueDate: 2026-08-14)
Yes — since August 11, 2026, CVE-2026-20349 is actively exploited and was added to the CISA KEV catalog with a remediation deadline of August 14, 2026.
Is your Microsoft SharePoint Server safe from ransomware today? (CVE-2026-45659, CISA KEV)
No — CVE-2026-45659 (CVSS 8.8) is being actively exploited by ransomware gangs and has been in the CISA KEV catalog since July 2, 2026.
SharePoint CVE-2026-58644 is now used by ransomware gangs — what it means for your on-prem estate
On 11 August 2026, CISA confirmed that CVE-2026-58644 (CVSS 9.8, unauthenticated remote code execution via deserialisation in on-prem Microsoft SharePoint Server) is now actively used in
CHORS Cryptogram
Minimalistyczny zapis na miesięczne analizy. Surowe dane, trendy audytowe i analiza zero-day prosto na skrzynkę. Zero marketingowego szumu.
Klucz GPG dostępny na życzenie.