Sandworm blamed for cyberattack against Poland's energy grid.

This briefing summarizes several high-impact cyber incidents: a Sandworm-attributed December 2025 attack on Poland’s distributed energy resources using a new wiper (DynoWiper) that damaged OT equipment, widespread active exploitation of a patched WinRAR path-traversal vulnerability (CVE-2025-8088), massive user-data exposures from SoundCloud and the Chat & Ask AI app, disruption of the IPIDEA residential proxy network used by many threat actors, and a legal/forensic case where Microsoft provided BitLocker recovery keys to the FBI.