Polish Researchers Discover Vulnerabilities in Government and Hospital Websites
Photo: TechCrunch
Quick answer
Polish researchers uncovered critical vulnerabilities in 250,000 websites of government institutions, including courts, hospitals, and airports.
At the Def Con cybersecurity conference in Las Vegas, Polish researchers Robert Kruczek and Kamil Szczurowski presented their findings on vulnerabilities in Poland’s internet infrastructure. According to their data, over 10,000 government organizations and 250,000 websites contain critical vulnerabilities that could be exploited by malicious actors.
Among the vulnerable resources are websites of airports, hospitals, courts, and other government institutions. A key issue was outdated software, particularly the Pad CMS content management system, which is no longer supported by developers. This allowed researchers to gain access to more than 300 websites without authorization.
Another serious vulnerability affected approximately 245 judicial bodies in the country. Researchers noted that many vendors do not take bug reports seriously, dismissing them as "inconveniences." As a result, the risk of cyberattacks on critical infrastructure remains high.
Poland has already faced cyberattacks, allegedly orchestrated by Russian hackers, who exploited weak security to target energy and water supply companies. The researchers have shared their findings with authorities through official channels, hoping for improvements in the situation.
Common questions
- What vulnerabilities were found in Polish government websites?
- Researchers discovered critical vulnerabilities in the Pad CMS content management system, allowing access to hundreds of websites without passwords. Bugs affecting two-thirds of Poland’s judicial bodies were also identified.
- Why are the vulnerabilities not being fixed?
- Many vendors ignore reports of bugs, considering them insignificant. Some software, like Pad CMS, is no longer supported by developers, making vulnerability patches impossible.
- What are the potential consequences of these vulnerabilities?
- Vulnerable websites could become targets for cyberattacks, including breaches and data leaks. Poland has already experienced cyberattacks on energy and water supply companies due to weak security.
Dzen feed: /feed/dzen.xml · RSS: /feed.xml