Cyberattack on Poland's energy infrastructure compromised around thirty facilities.

Three major security stories: a December attack on Poland's distributed energy resources (DERs) attributed to ELECTRUM/Sandworm that accessed OT systems and permanently damaged equipment at about 30 sites; reports of widespread active exploitation of a patched WinRAR vulnerability (CVE-2025-8088) used to drop persistence artifacts into the Windows Startup folder by state-linked and criminal actors; and a SoundCloud breach affecting 29.8 million accounts, attributed to the ShinyHunters group.