cert

Vulnerabilities in Dayforce Payroll software

CERT Polska has received a report about 3 vulnerabilities (from CVE-2026-73640 to CVE-2026-73642) found in Dayforce Payroll ...
cert

MikroTrick: technical analysis, disclosure process, and the use of LLM agents

We describe the technical details of the MikroTrick chain, which combines the CVE-2026-67279 and CVE-2026-86060 ...
cert

Inside a multi stage toll fraud operation targeting Poland

On 14 September 2026, CERT Polska found two Facebook advertisements targeting Polish users with false warnings that their PDF application had expired. Both ads redirected users to the Google Play ...
cert

Vulnerability in DirectAdmin Evolution Skin software

CERT Polska has received a report about vulnerability in DirectAdmin Evolution Skin software and participated in coordination of its disclosure. Ticket management system in DirectAdmin Evolution Skin ...
cert

Vulnerabilities in GNU gawk software

CERT Polska has received a report about vulnerabilities in GNU gawk software and participated in coordination of their disclosure. The vulnerability CVE-2026-40467: Use After Free vulnerability has ...
cert

UNC1151/Ghostwriter phishing campaign targeting Gmail accounts

The UNC1151/Ghostwriter group remains one of the most active APT groups monitored by the CERT Polska team. For many years, it has consistently conducted phishing campaigns aimed at gaining access to ...
cert

Vulnerabilities in GNU Bison software

CERT Polska has received a report about vulnerabilities in GNU Bison software and participated in coordination of their disclosure. This issue was fixed in commit ...