Poland's energy infrastructure lacked basic security measures, CERT Polska says.

A news roundup reports three major security items: CERT Polska detailed a December Russian attack that breached wind/solar farms and a heat-and-power plant in Poland—attributing activity to Russian groups (Sandworm/Berserk Bear/Dragonfly) and highlighting poor security hygiene; Notepad++ disclosed that a suspected Chinese state actor hijacked its update traffic by compromising a shared hosting provider from June to December 2025; and a former Google engineer was convicted for stealing AI-related trade secrets for the benefit of China.