The Polish government rushing to finalize a National Cybersecurity System Act for earlier this month / current legislative push
Public Sector Action
Summary
Hide ▲
Show ▼
Poland's government is rushing to finalize a National Cybersecurity System Act implementing NIS2, which would impose stricter risk management, IT and OT security, and incident response requirements. The push matters because it would raise the cybersecurity baseline for Polish institutions and the broader market. The move comes amid heightened concern over foreign-state interference and resilience of critical systems.
Related Happenings
EU and UK sanctions Russian GRU-linked cyber actors
Regulatory/Legal Action
H score44
First: 13.07.2026 14:19
Last: 13.07.2026 14:19
Sources 1
About this happening:
The Council of the European Union and the UK imposed new sanctions on Russian individuals and entities tied to cyber and hybrid operations, tightening legal pressu...
EU and UK sanctions Russian GRU-linked cyber actors
Regulatory/Legal ActionAbout this happening: The Council of the European Union and the UK imposed new sanctions on Russian individuals and entities tied to cyber and hybrid operations, tightening legal pressu...
FSB 16th Centre yearslong cyber espionage campaign against European governments and critical infrastructure
Campaign
H score42
First: 13.07.2026 13:00
Last: 13.07.2026 13:00
Sources 1
About this happening:
FSB 16th Centre is tied to a yearslong cyberespionage campaign against European governments and critical infrastructure across at least nine countries. The C...
FSB 16th Centre yearslong cyber espionage campaign against European governments and critical infrastructure
CampaignAbout this happening: FSB 16th Centre is tied to a yearslong cyberespionage campaign against European governments and critical infrastructure across at least nine countries. The C...
ELECTRUM and KAMACITE split OT access-and-execution operating model
Threat Actor Meta
H score22
First: 28.01.2026 18:06
Last: 28.01.2026 18:06
Sources 1
About this happening:
ELECTRUM and KAMACITE are operating as a split OT intrusion ecosystem, with one cluster focused on access and the other on execution, which increases flexibility and e...
ELECTRUM and KAMACITE split OT access-and-execution operating model
Threat Actor MetaAbout this happening: ELECTRUM and KAMACITE are operating as a split OT intrusion ecosystem, with one cluster focused on access and the other on execution, which increases flexibility and e...
Polish power grid hit by network compromise
Incident
H score32
First: 28.01.2026 18:06
Last: 28.01.2026 18:06
Sources 1
About this happening:
Dragos disclosed a late-December cyberattack on the Polish power grid that disrupted OT communication and control at distributed generation sites. The intrusion affected combined...
Polish power grid hit by network compromise
IncidentAbout this happening: Dragos disclosed a late-December cyberattack on the Polish power grid that disrupted OT communication and control at distributed generation sites. The intrusion affected combined...
Latest development: 29.01.2026 00:14
Dragos says a coordinated cyberattack on Poland's power grid in late December targeted multiple distributed energy resource (DER) sites across the country, including combined heat and power (CHP) facilities and wind and solar dispatch systems. The activity compromised OT systems, damaged key equipment beyond repair, disabled communications equipment at multiple sites, wiped Windows systems, and left power generation uninterrupted while affecting at least 12 confirmed sites, with Dragos estimating about 30. Dragos attributes the activity with moderate confidence to the Russian threat actor Electrum and describes it as distinct from Sandworm (APT44).
Sandworm destructive campaign against Poland’s power grid
Campaign
H score46
First: 26.01.2026 12:55
Last: 26.01.2026 12:55
Sources 1
How related:
ESET claimed in a brief statement on Friday that the group was responsible for a series of attacks on Poland’s power grid in late December.
About this happening:
Sandworm ran a coordinated campaign against Poland’s power grid in late December 2025, using a destructive wiper named DynoWiper. The activity targeted two CHP p...
Sandworm destructive campaign against Poland’s power grid
CampaignHow related: ESET claimed in a brief statement on Friday that the group was responsible for a series of attacks on Poland’s power grid in late December.
About this happening: Sandworm ran a coordinated campaign against Poland’s power grid in late December 2025, using a destructive wiper named DynoWiper. The activity targeted two CHP p...
Timeline
-
26.01.2026 12:55 2 articles · 5mo ago
Poland rushes to finalize NIS2 cybersecurity act
Legal Policy Action UpdatePoland’s government is rushing to finalize a National Cybersecurity System Act implementing NIS2, aiming to impose stricter requirements for risk management, IT and OT security, and incident response on Polish institutions and market participants.
Show sources
- Wiper Attack on Polish Power Grid Linked to Russia’s Sandworm — www.infosecurity-magazine.com — 26.01.2026 12:55
- Wiper Attack on Polish Power Grid Linked to Russia’s Sandworm — www.infosecurity-magazine.com — 26.01.2026 12:55