Baraysan Soomaaliyeed oo ka warbixinaya dhibaatooyinka amniga ee internetka Poland
Baraysan amniga Robert Kruczek iyo Kamil Szczurowski ayaa ka warbixiyay tartanka Def Con ee magaalada Las Vegas inay soo bandhigeen dhibaatooyin amni oo saameyn ku yeeshay 10,000 oo hay'ad oo dowladeed iyo 250,000 oo web-ga ah ee Poland, kuwaas oo ka mid ah xarumaha caafimaadka, garoomada iyo maxkamadaha.
Dhibaatooyinka Pad CMS iyo xarumaha dowladda
Baraysan amniga ayaa soo bandhigay inay ogaadeen dhibaatooyin muhiim ah oo ku jira nidaamka maareynta web-ga Pad CMS, kaas oo awood u siiyay inay galeen 300 oo web-ga oo dowladeed iyadoo aan la baarinin erayga sirta ah. Nidaamkaas waxaa la sheegay inuu noqday mid 'dhammaaday' (end of life) oo aan la taageerin, taasoo keentay inaan la tijaabin.
Tani waxay muujisay in shirkadaha software-ga ay dhibaatooyin ka dhigaan xarumaha dowladda, iyadoo aan jirin habab ama lacagaha loo isticmaalo in la xaliyo dhibaatooyinka amniga. Baraysan amniga ayaa sheegay in dhibaatooyinkan ay aad u fududahay in la isticmaalo, balse shirkadaha ayaa ku eedeysan inay u arkeen inay yihiin waxyeello yar.
Maxkamadaha Poland iyo khataraha internetka
Baraysan amniga ayaa sidoo kale ogaaday in dhibaato kale ay u ogolaatay inay galeen 245 oo maxkamad oo ka mid ah kuwa dowladda Poland, taasoo ah saddexda qayb ee maxkamadaha dalkaas. Tani waxay muujisay in xarumaha maxkamadaha ay yihiin kuwo aad u khatar ah iyadoo aan la tijaabin amniga.
Tani waxay ku soo beegmaysaa waqtiga Poland ay ku jirto dadaal ay ku samaynayo inay adkeeyso amniga internetka kadib markii ay soo baxday in Russia ay weeraro ku qaadday shirkadaha biyaha iyo kheyraadka dalkaas, iyadoo la sheegay in dhibaatooyinka amniga ay ka mid yihiin kuwaas.
Warbixinta dowladda iyo natiijada
Baraysan amniga ayaa warbixinta ku soo gudbiyay dowladda Poland iyadoo la isticmaalay habab rasmi ah. Waxay sheegeen inay u sameeyeen warbixintaan sababtoo ah waxay u arkeen inay tahay mid muhiim ah oo ka dhigaysa Poland inay noqoto mid 'aad uga badbaaday' (a little bit more safe).
Tani waxay muujisay in baraysan amniga ay u arkeen inay tahay waajibaadka ay qabaan inay ka hortagaan dhibaatooyinka amniga, iyadoo la sheegay inay u sameeyeen warbixintaan si ay uga hortagaan weerarada internetka ee Poland.
Two Polish cybersecurity experts scanned the nation's public web and uncovered widespread security flaws affecting thousands of government agencies, hospitals, and courts, raising urgent concerns about the country's digital infrastructure.
Widespread Vulnerabilities Discovered Across Poland's Public Web
Security researchers Robert Kruczek and Kamil Szczurowski conducted a comprehensive scan of Poland's public internet and identified more than 10,000 affected public entities with 250,000 websites containing security flaws. The investigation, driven by patriotic concern and a desire to improve national cybersecurity, revealed critical weaknesses in widely used content management systems.
Among the most alarming findings was a critical vulnerability in Pad CMS, a popular content management system, which allowed the researchers to access over 300 public websites without requiring any password. The software developer had not patched the flaw because the system had become 'end of life' and was no longer supported by the vendor.
Judiciary and Public Services at High Risk of Cyberattacks
The researchers discovered another significant bug that enabled them to gain access to the websites of approximately two-thirds of Poland's judiciary, affecting around 245 courts. This vulnerability highlighted the systemic nature of the problem, as many of these institutions relied on outdated or poorly maintained software solutions.
The duo reported their findings to the government through various official channels, expressing concern that some vendors treated bug reports as mere inconveniences rather than serious security threats. They noted that the combination of buggy software and a lack of bug bounty programs was putting Poland's public services at risk of hijacks and other malicious attacks.
Cybersecurity Concerns Amid Rising Threats to National Infrastructure
This research emerges as Poland works to strengthen its cyber defenses following a wave of suspected Russian hacks targeting the country's energy and water providers. The timing underscores the growing urgency of addressing vulnerabilities in public sector digital infrastructure across the nation.
Despite the extensive nature of the findings, the researchers concluded that their efforts were ultimately worthwhile, stating that as a result, Poland is 'a little bit more safe.' Their presentation at the Def Con cybersecurity conference in Las Vegas brought attention to the critical need for improved security practices in government and public service websites.
