Hackers Breach Polish Power Plant via Cellular Network, Disrupt Operations
Hackers breached a Polish power plant's controls via a private cellular network, shutting down a steam turbine and process-water treatment system. The attack, disclosed by CERT Polska, involved pivoting from a compromised wind-farm network to the power plant's controller through a private APN. The breach exploited default admin credentials and permissive network configurations, allowing the attacker to disrupt operations without malware. The incident highlights vulnerabilities in private APN configurations and the need for improved security measures. CERT recommends auditing APN configurations, enabling client isolation, and treating APNs as untrusted from the operational technology side. 
