Russian hackers breached Polish power grid thanks to bad security, report says

Poland’s CERT published a technical report describing December 29 attacks on wind and solar farms and a heat-and-power plant by suspected Russian state-linked hackers who exploited default credentials and lack of multi-factor authentication to deliver wiper malware that rendered monitoring/control systems inoperable at some sites; attacks were attributed to Sandworm by some vendors while Poland named Berserk Bear, and power system stability was not compromised.