Index live· 1,284 files · 148 editions
ForensicPost

Search the index

23 results
Try
Results for “Infrastructure”Newest first
26-0808
File

Polish Heat Plant Attackers Reached the PLCs Through a Private APN

A private network is still a network. Once anything inside it could reach anything else, the isolation was a route.

UnattributedPrivate APN pivot to OTEnergyInfrastructure
Sev 4TargetPolish combined heat and power plantActorUnattributedPoland
26-0728
File

CI Fortify Guidance Tells Critical Infrastructure Operators to Plan for Isolation

New guidance asks operators to build and test plans for running vital systems disconnected. The assumption underneath it is the story.

UnattributedGuidancePublic sectorMethod
Sev 3TargetCritical infrastructure operatorsActorUnattributed
26-0626
File

Lumma Stealer Reported on 394,000 Machines After Two Takedowns

Two disruptions survived, ~394,000 machines. Takedowns remove infrastructure; the code, operators and customer base persist.

UnattributedInfostealerMultipleEnforcement
Sev 3TargetLumma Stealer infrastructureActorUnattributed
26-0624
File

Operation Endgame Seized 326 Servers and Recovered 27 Million Credentials

326 servers and 142 domains seized, and 27 million credentials recovered. The credentials outlast the infrastructure.

MultipleEnforcement actionMultipleEnforcement
Sev 3TargetAmadey, StealC, SocGholish infrastructureActorMultiple
26-0409
File

The Second European Commission File This Year

A cloud flaw touching Commission web properties, internal systems untouched. The second such file this year, and the boundary held both times.

UnattributedCloud infrastructure flawPublic sectorPublic sector
Sev 2TargetEuropean Commission web propertiesActorUnattributed
26-0320
File

Residential Proxy Networks Sell State-Grade Traffic Origination to Any Buyer

Originating traffic from a home connection in any country used to need a state service. It is now a subscription, and it breaks three controls at once.

MultipleResidential proxyMultipleInfrastructure
Sev 4TargetNetwork origin controlsActorMultiple
26-0216
File

Vulnerability Programme Targeted the Foundational Libraries Everything Depends On

“Systemically important” is borrowed from financial regulation, where it triggers obligations. Applied to FFmpeg and the kernel it triggers nothing.

UnattributedGovernance gapMultipleInfrastructure
Sev 4TargetFoundational open-source componentsActorUnattributed
26-0205
File

The Phone Number Became National Identity Infrastructure by Accident

A number identifies a billing relationship. It now secures banking and government access, and the depending services cannot see a port request.

MultipleNumber portability abuseTelecomInfrastructure
Sev 4TargetAccount recovery infrastructureActorMultiple
26-0110
File

Billions of Consumer Routers and Cameras Receive No Updates After a Few Years

Billions of connected computers with no owner, no update path and no monitoring. In an enterprise that is a finding; at national scale it is the default.

MultipleUnpatched firmwareMultipleInfrastructure
Sev 4TargetConsumer connected devicesActorMultiple
26-0109
File

Who Pays for the Code Everything Runs On

The same unfunded dependency is the root cause of files in four sections of this database, and nobody is being asked to choose a remedy.

UnattributedFunding structureMultipleInfrastructure
Sev 4TargetOpen-source ecosystemActorUnattributed
25-1127b
File

Telephone Systems Went Down at Three London Councils

The redundancy people assume exists between channels frequently does not exist in the infrastructure.

UnattributedPublic sectorAvailability
Sev 4TargetLondon borough residentsActorUnattributedUnited Kingdom
25-1128
File

Eurofiber Breach Exposed Documentation of European Network Infrastructure

Where fibre runs, which routes carry which customers, where the single points of failure sit — a dependency map for organisations that were never asked.

UnattributedTelecomThird party
Sev 4TargetEurofiberActorUnattributed
25-1112
File

A Million Users’ Metadata Is Not a Lesser Breach

Content tells you what a known person said. Metadata tells you who the people are — and it is the one that scales.

Salt TyphoonLawful-intercept infrastructureTelecomAnalysis
Sev 4TargetTelecom subscribersActorSalt Typhoon
25-0312
File

FBI, CISA and MS-ISAC Put Medusa Past 300 Critical Infrastructure Victims

A figure that can only be an undercount. Those are the most useful numbers in this database and there are very few of them.

MedusaVariousMultipleAdvisory
Sev 4TargetCritical infrastructureActorMedusaUSA
25-0304
File

Salt Typhoon Reached US Carriers Through CALEA Lawful-Intercept Systems

The vulnerability was not a defect in the implementation. It was the specification — and the thirty-year exceptional-access debate now has an empirical entry.

Salt TyphoonLawful-intercept infrastructureTelecomTelecom
Sev 5TargetUS telecommunications carriersActorSalt TyphoonUSA
25-0228
File

Southern Water Is the Only 2025 Water File, Because a Regulator Forced a Number

A small municipal utility has the operational exposure of critical infrastructure and the budget of a town department — and no route into the record.

WaterCoverage
Sev 3TargetUS community water systemsActorUnattributedUSA
24-1031
File

Sophos Published Five Years of Attacks on Its Own Firewalls and Its Use of an Implant

A private company placed monitoring code on machines it did not own, and published that it had.

China-based groups, per the vendorEdge-device vulnerabilitiesTechnologyInfrastructure
Sev 5TargetSophos perimeter devicesActorChina-based groups, per the vendorUnited Kingdom
23-0524
File

Five Eyes Advisory Says a PRC Actor Is Living off the Land Inside Critical Infrastructure

The only file here where the recorded harm is entirely prospective. The point was to be there later.

Volt TyphoonLiving off the landPublic sectorInfrastructure
Sev 5TargetUS critical infrastructureActorVolt TyphoonUSA
23-0125
File

Sandworm Pushed a Wiper to Ukrainian Targets Through Active Directory Itself

The distribution channel an organisation trusts most is the one that reaches everything.

SandwormGroup Policy deploymentPublic sectorInfrastructure
Sev 4TargetUkrainian organisationsActorSandwormUkraine
22-0627
File

Predatory Sparrow Published CCTV of Molten Steel Spilled at an Iranian Plant

Not a system disabled. A system operated, into a state the plant was built to prevent.

Predatory SparrowIndustrial control system accessManufacturingInfrastructure
Sev 5TargetIranian steel producersActorPredatory SparrowIran
22-0620
File

Forescout Catalogued 56 Insecure-by-Design Flaws Across 10 Industrial Vendors

The devices behave as specified. The specification assumed the network could be trusted.

Insecure by designManufacturingInfrastructure
Sev 4TargetIndustrial control devicesActorUnattributedUSA
22-0224
File

A Wiper Aimed at Ukraine Took 5,800 German Wind Turbines off Monitoring

Germany was not the target. The turbines were on the same satellite, and the wiper did not check.

SandwormNetwork management compromiseTelecommunicationsInfrastructure
Sev 5TargetViasat KA-SAT usersActorSandwormUkraine
22-0114
File

WhisperGate Wiper Hit Ukrainian Government Sites Six Weeks Before the Invasion

Finding a ransom note starts a recovery conversation. That was the deliverable.

UnattributedGovernmentInfrastructure
Sev 5TargetUkrainian government organisationsActorUnattributedUkraine
© 2026 ForensicPost Media · the desk · newsletterGlossaryNo search logging