CERT Polska private APN hardening recommendations
Advisory/Mitigation
Summary
Hide ▲
Show ▼
CERT Polska issued mitigation guidance for private APNs used to reach OT equipment after a real intrusion path into a Polish CHP plant. The recommendations focus on client isolation, traffic segmentation, and default-credential hygiene to stop lateral movement across cellular-managed access. The guidance is aimed at reducing the risk of pivoting from a compromised device into industrial control systems.
Related Happenings
CISA, ACSC, and FBI release CI Fortify isolation guidance for critical infrastructure
Public Sector Action
H score28
First: 28.07.2026 21:41
Last: 28.07.2026 21:41
Sources 1
About this happening:
CISA, ACSC, the FBI, and partners released CI Fortify – Advice for isolating vital systems for critical infrastructure operators. The guidance tells organizati...
CISA, ACSC, and FBI release CI Fortify isolation guidance for critical infrastructure
Public Sector ActionAbout this happening: CISA, ACSC, the FBI, and partners released CI Fortify – Advice for isolating vital systems for critical infrastructure operators. The guidance tells organizati...
CISA-led joint advisory to secure internet-exposed ATG systems
Public Sector Action
H score43
First: 05.06.2026 17:50
Last: 05.06.2026 17:50
Sources 1
About this happening:
On 2026-06-05, CISA, the FBI, the NSA, the Department of Energy, and other U.S. partners issued a joint advisory telling critical infrastructure organiza...
CISA-led joint advisory to secure internet-exposed ATG systems
Public Sector ActionAbout this happening: On 2026-06-05, CISA, the FBI, the NSA, the Department of Energy, and other U.S. partners issued a joint advisory telling critical infrastructure organiza...
Automatic tank gauge (ATG) systems ongoing attacks
Exploitation Wave
H score25
First: 05.06.2026 17:50
Last: 05.06.2026 17:50
Sources 1
About this happening:
Over 900 internet-exposed ATG systems across the United States are being targeted in ongoing attacks, creating risk of alert tampering, fuel or chemical leaks, and...
Automatic tank gauge (ATG) systems ongoing attacks
Exploitation WaveAbout this happening: Over 900 internet-exposed ATG systems across the United States are being targeted in ongoing attacks, creating risk of alert tampering, fuel or chemical leaks, and...
CISA automatic tank gauge system mitigations
Advisory/Mitigation
H score20
First: 02.06.2026 15:00
Last: 02.06.2026 15:00
Sources 1
About this happening:
CISA, FBI, NSA, and the Department of Energy warned that attackers are targeting internet-exposed automatic tank gauge (ATG) systems used to monitor fuel and l...
CISA automatic tank gauge system mitigations
Advisory/MitigationAbout this happening: CISA, FBI, NSA, and the Department of Energy warned that attackers are targeting internet-exposed automatic tank gauge (ATG) systems used to monitor fuel and l...
NCSC-UK joint advisory on covert botnets and proxy networks
Public Sector Action
H score66
First: 23.04.2026 15:28
Last: 23.04.2026 15:28
Sources 1
About this happening:
NCSC-UK and partner agencies issued a joint advisory warning that China-nexus hackers are using hijacked consumer devices as covert proxy networks to hide maliciou...
NCSC-UK joint advisory on covert botnets and proxy networks
Public Sector ActionAbout this happening: NCSC-UK and partner agencies issued a joint advisory warning that China-nexus hackers are using hijacked consumer devices as covert proxy networks to hide maliciou...
Timeline
-
11.08.2026 09:55 2 articles · 2h ago
CERT Polska urges client isolation for private APNs reaching OT equipment
Mitigation Patch UpdateCERT Polska advised operators using private APNs to audit the APN configuration, enable client isolation, segment and restrict traffic, remove unnecessary management services from APN-reachable interfaces, and change default credentials after tracing a real intrusion path into a Polish combined heat and power plant through a private APN.
Show sources
- Hackers Breach Polish Power Plant Controls via Private Cellular Network and Shut Turbine — thehackernews.com — 11.08.2026 09:55
- Hackers Breach Polish Power Plant Controls via Private Cellular Network and Shut Turbine — thehackernews.com — 11.08.2026 09:55