Top stories.
- Sandworm blamed for attempted cyberattack against Poland's energy grid.
- Microsoft provided the FBI with BitLocker encryption keys after receiving a warrant.
- CISA flags critical VMware flaw as actively exploited.
Sandworm blamed for attempted cyberattack against Poland's energy grid.
ESET has attributed a December 2025 attempted cyberattack on Poland's energy infrastructure to the Russian threat actor Sandworm. Poland's energy minister said earlier this month that the incident was "the strongest attack on the energy infrastructure in years," though the attack was largely thwarted. ESET said the attackers used a newly observed strain of wiper malware tracked as "DynoWiper." According to Reuters, the country's energy minister said the "failed attack aimed to disrupt the communication between renewable installations and the power distribution operators."
Sandworm, a threat actor associated with the GRU's unit 74455, is believed to be responsible for previous attacks targeting Ukraine's power grid in 2015 and 2016. ESET notes that the attempted attack in Poland occurred days after the tenth anniversary of the 2015 incident, which cut power to hundreds of thousands of people across Ukraine for several hours. The attempted attack against Poland's grid, as well as the two prior attacks against Ukraine, were designed to shut off civilians' power during the dead of winter.