Long Reads
Security researchers scanned the Polish web and found courts, hospitals, and airports at risk of hacks | TechCrunch
Researchers found common points of failure, like software used to organize and display web content, could have allowed hackers to run riot through government websites.
Two Polish security researchers wanted to find out how vulnerable their country’s internet was to potential cyberattacks and quickly found that thousands of public agencies and websites were at risk of being hacked.
At the Def Con cybersecurity conference in Las Vegas on Friday, security researchers Robert Kruczek and Kamil Szczurowski said they wanted to understand the state of Poland’s public web out of a sense of patriotism and a desire to make it safer for everyone.
Before long, the duo discovered more than 10,000 affected public entities with 250,000 websites with security flaws, including airports, hospitals, and government offices.
The researchers found that some of the vendors’ buggy software, coupled with a lack of bug bounties and ways to report security flaws, are putting Poland’s public services at risk of hijacks and other attacks. The researchers also said that some bugs were incredibly easy to exploit but were not always taken seriously, with some vendors describing the bug reports as inconveniences.
The research comes as Poland is trying to shore up its cyber defenses after a wave of suspected Russian hacks targeting the country’s energy and water providers. Some of the hacks have been carried out by taking advantage of weak cybersecurity.
Kruczek and Szczurowski found critical vulnerabilities in the widely used content management system Pad CMS, which allowed them to easily access over 300 public websites without needing a password. The software developer did not patch the software because it had become “end of life” and was no longer supported.
Another bug allowed them to gain access to the websites of some two-thirds of Poland’s judiciary, or about 245 courts, they said.
The duo reported their findings to the government through various official channels.
The researchers said during their talk that it was ultimately worth the hassle, saying that as a result we are “a little bit more safe.”
Take a break. Sharpen your mind.
Trivia, word games, puzzles and more—fresh challenges are waiting every day.
Explore all gamesRelated Articles
My Husband hide a key in our wedding album then his mother begged me not to use
My husband was unconscious in the emergency room when his mother grabbed my wrist and whispered, “Whatever you find in his wallet, don’t go to that house.” I stared at her. “What house?” Her face changed immediately. “I shouldn’t have said anything.” That was when the nurse returned Daniel’s belongings to me. His phone. His watch. His wedding ring.
My Real Father Was the Reason Robert Took Daniel—And He’s Still Alive
Three seconds after Lena’s voicemail ended, Anna said, “I know who Claire’s father is.” Everyone turned toward her. I felt Daniel’s hand tighten around mine. “What did you say?” Anna didn’t look at me. She looked at Marianne. And Marianne suddenly looked terrified. “You promised me,” Marianne whispered. Anna shook her head. “No more promises.” I stepped between them. “You both know?” Marianne closed her eyes.
The DNA Report Said My Husband and I Were Related—Then I Saw Where the Samples Came From
“The report says we’re related.” Daniel’s words stayed in my ear. I was still standing beside Lena at the bus station. “How related?” He didn’t answer. “Daniel.” “First cousins.” My stomach turned. Lena grabbed my arm. “That’s impossible.” Daniel heard her. “Apparently not.” “Read the laboratory name,” Lena said.
Recommended for You
My Mother Ran Away to Protect Me—Then I Learned What My Father Planned for My Husband
The second paragraph of my biological mother’s letter said: Robert was going to take Daniel away. And Thomas helped him prepare the papers. I stopped reading. My father was still on speakerphone. “Dad.” Silence.
My Father Admitted He Brought My Husband Into This Family—But Why?
My father called back eleven minutes later and said, “Claire, before I tell you anything, get Daniel out of that house.” I looked across the dusty bedroom. Daniel was still holding the hospital bracelet with his biological mother’s name on it. “Why?” “Because you’re not alone.” Every hair on my arms lifted. I turned toward the hallway. Nothing. “Dad, what are you talking about?” “The house.” “What about it?” “There’s someone else there.” Daniel heard him. He walked toward me. “Put
Episode 8 — The Last Secret Eleanor Took to Her Grave
Richard had just told Michael that Arthur’s name had been removed from an old hospital record. For several seconds, Michael said nothing. Then he asked the only question that mattered. “Are you my father or not?” Richard looked away. “I told you. I believed I was.” “That isn’t an answer.” “It’s the only one I have.” Michael stood so quickly his chair scraped across the floor. “You let me come here thinking you knew.” “I thought I did.” “For forty-nine years?” Richard lowered his eyes
Join the discussion
No comments yet. Start the conversation.