After major Poland energy grid cyberattack, CISA issues warning to U.S. audience

A December destructive cyberattack against Poland’s energy sector used vulnerable internet-facing edge devices to deploy wiper malware that damaged remote terminal units, destroyed HMI data, and corrupted firmware across distributed energy resources (about 30 wind and photovoltaic farms); Polish CERT linked the infrastructure used to a Russian government–linked APT, and CISA and other agencies issued alerts urging operators to secure OT/ICS and edge devices.