Hackers Sabotage Polish Energy Facility Using Novel Private APN Pivot
TL;DR. Threat actors attacked a Polish energy facility's industrial control systems in December 2025, using a private APN as a novel attack vector. - The cyberattack caused a temporary shutdown of a steam turbine and water treatment system. - CERT.PL identified this as a new method for compromising critical infrastructure. - The same vulnerable configuration exists in other countries.
- Threat actors targeted a Polish CHP plant in December 2025.
- Hackers used a private APN as a novel attack vector to compromise industrial control systems.
- The attack disrupted a steam turbine and water treatment system, but operations quickly resumed.
- CERT.PL warned of similar vulnerabilities globally.
Sources
- Novel Private APN Pivot Let Hackers Sabotage Second Polish Energy Facility — securityweek.com