Data centers are increasingly under attack in the Ukraine-Russia war, as well as Iran’s wanton drone and missile attacks on neighboring states like Bahrain and the United Arab Emirates (UAE), a study revealed this weekend.
The post Study: Data Centers Become Military Targets in Ukraine, Russia, and Middle East appeared first on Breitbart.
Government websites in Europe and elsewhere went offline on Wednesday after the disclosure of critical vulnerabilities in a widely used programming language sent website operators around the world scrambling to protect their systems.
Developers of the PHP programming language on Wednesday released urgent new fixes to vulnerabilities that had been lurking in their software for years until they were uncovered using AI, saying all users were “encouraged to update immediately.”
With tech firms warning that some hackers were already exploiting the flaws, government agencies across Europe were among those that took sites offline as a precaution.
Because a fix is now public and artificial intelligence tools are able to reverse engineer the bug with little effort, experts said they were bracing for a wave of intrusions as hackers jumped to get ahead of the updates.
AI was powering a “race to exploit,” said Costin Raiu, co-founder of cybersecurity research and incident response firm TLP:Black. He said the next step was the “mass compromise of every vulnerable web server on the internet.”
PHP — a language that dates back to the early 1990s and initially stood for “Personal Home Page” — underpins huge parts of the public-facing web and is baked into WordPress, Drupal, Joomla and Magento sites, meaning any critical vulnerability potentially has enormous knock-on consequences.
“All servers using any version of PHP released in the last 20 years will be vulnerable,” said Tiffany Farriss, the interim chief executive of the Drupal Association. “This issue impacts the majority of the internet.”
Cybersecurity agencies around the world have urged PHP users to update immediately or take websites offline until patches can be applied.
According to data from Censys, the internet intelligence firm, about 1.5 million out of 2.6 million hosts report running a version of PHP for which there is no fix.
The Dutch cybersecurity agency itself went offline, saying it had done so as a precaution because of the vulnerabilities. The operator of the online encyclopedia Wikipedia also said it had taken down an unspecified number of systems until they could be safely patched, while the Internet Archive, the sprawling online library, said it also briefly went offline to deal with the issue.
Even some world leaders weighed in. The Dutch prime minister said he was closely monitoring the situation. Japanese Prime Minister Sanae Takaichi in a post on X said website owners should “check whether your live site uses PHP and prepare to apply the new fix.”
BUG FOUND WITH AI
The flaw in PHP was discovered using artificial intelligence, two cybersecurity companies said in independent reports. Calif said in a blog post it found the flaws with the help of a large language model on August 1 and had been working on a fix ever since. Alphabet-owned GOOGL.O cybersecurity company Wiz said in a blog post that it too had discovered it with the help of Wiz Atlas, its autonomous AI vulnerability research tool, as well as Google’s Gemini 4 Argon and OpenAI’s GPT-5.6 Sol.
The vulnerabilities remained hidden in the PHP codebase for more than a decade and would have been extraordinarily complicated for a human hacker to take advantage of, Wiz’s post said.
“Pre-AI, this manual work would be difficult to implement and even harder to scale,” it said. “With AI, this is no longer a barrier.” Calif and Wiz said they coordinated with one another and the PHP team and OpenAI on the discovery.
In a statement, the White House said it was made aware of the flaw on Friday.
In a blog post late on Wednesday, Amazon AMZN.O security chief CJ Moses said the tech giant’s security team detected an attempt to exploit the vulnerabilities against one of its decoy “honeypot” systems on October 17, four days before public disclosure.
The attempt on the system came from an anonymous internet address, suggesting the activity was conducted by a threat actor, Moses said, adding it was unclear how the actor learned of the flaws while they were under embargo.
More attempts followed on Wednesday by multiple actors before the embargo lifted. Amazon said it was still unclear whether any of the attempts would have worked against real websites, adding the flaws were “now being broadly exploited in the wild.”
CRITICAL SOFTWARE
PHP is a programming language used to run websites. When a visitor loads a page, a server running PHP assembles the content and sends it to the browser. It is free, open-source software maintained by volunteers.
Its ubiquity — PHP runs roughly 75% of websites whose programming language can be identified, according to web technology tracker W3Techs — has made experts anxious. AI-assisted hacking campaigns, which have proliferated in recent weeks, could wreak havoc on unpatched servers, said Lukasz Olejnik, a visiting senior research fellow at King’s College London.
“The scale is huge, and with AI, exploitation may happen instantly,” Olejnik said.
WordPress.com operator Automattic said users of its hosted solutions and Tumblr were safe from the bug. Risks were higher for small PHP-powered websites run by individuals or organizations with limited technical resources, often on shared hosting services where customers do not directly manage the underlying servers.
MASS OUTAGES
In the Netherlands, several organizations followed the example of the National Cyber Security Centre and took public-facing websites offline, including the Port of Rotterdam, government portal Overheid.nl, the national soccer association KNVB, the websites for the country’s five largest political parties and several hospital websites.
Danish municipal IT company Kombit said it had shut down several services, including the national school communication platform.
Disruption was even more widespread in Finland, where state IT services provider Valtori said government public network services had been taken offline “as a precautionary measure.”
France’s Interior Ministry said it had placed all of its websites into preventive maintenance.
The developers of the widely used PHP programming language said on Wednesday they would release patches for two critical vulnerabilities, as EU cybersecurity officials warned organisations unable to apply the fixes should take affected websites offline.
PHP is used across large parts of the internet, and speculation has circulated over the past day that websites running the software could be exposed to serious cyber intrusions.
“PHP is everywhere. It quietly powers WordPress, Drupal, Joomla, and Magento sites, shared hosting platforms, control panels, and an awful lot of software that doesn’t even advertise that it runs PHP under the hood,” cybersecurity company Huntress said in a blog post.
In a security update, PHP said both vulnerabilities were rated 9.2 on the CVSS v4.0 severity scale and urged users to “upgrade as soon as the release is available”.
It said a patch for both vulnerabilities was scheduled for 1400 GMT on Wednesday.
Dane Knecht, the chief technology officer of Web and cloud security firm Cloudflare NET.N, said that attacks were emerging and Cloudflare was updating its firewall rules as a stopgap measure.
“We are seeing early attacks emerging and are updating mitigations as new vectors show up. This is a STOPGAP only. Patch as soon as PHP releases the update,” he said on X.
The European Union Computer Emergency Response Team (CERT-EU) said on Tuesday in an advisory that the 9.2 rating indicated a risk of unauthenticated remote code execution, a type of flaw that can allow attackers to run malicious code on vulnerable systems without logging in.
CERT-EU urged organisations to prepare for the immediate patching of affected assets and said those unable to do so should consider taking affected sites offline.
The Australian Cyber Security Centre (ACSC) issued similar guidance, urging organisations to identify PHP systems in their environments, prepare to apply patches and monitor applications for signs of malicious activity.
“ACSC is currently not aware of active exploitation related to these vulnerabilities,” the agency said.
Web hosting provider GoDaddy said the flaws could allow attackers to execute code on affected servers over the internet, potentially leading to data theft, website defacement or full system compromise.
Wordfence, a security plugin that protects WordPress websites, said all WordPress sites run on a PHP-installed server. It warned that automatic updates would not apply the fix and advised site owners to find out who is responsible for updating PHP on their sites.
PHP’s security team said details of the vulnerabilities, affected versions and the fixed releases would be published when patches are issued.
CERT-EU and the ACSC said all PHP versions from PHP 5 onward could be affected, although PHP has not disclosed which versions are vulnerable.
In an official statement issued on Monday, 19 October, the company announced that it had filed a formal complaint with Dutch police and was cooperating with national cybersecurity authorities. Although physical supermarkets have remained open, the disruption has affected online shopping, deliveries and some distribution operations.
The company said investigators had so far found no evidence that sensitive information belonging to customers, employees or business partners had been taken. However, its investigation remains open, and the identity and objectives of those responsible have not been publicly established.
The disruption began on 12 October, when Ahold Delhaize detected suspicious activity within its information technology infrastructure.
The group responded by taking a number of systems offline as a precaution, affecting most of its retail brands in Europe and the United States. The consequences varied considerably between businesses, with some experiencing prolonged interruption to digital services while others were able to restore operations more quickly.
Albert Heijn, the Netherlands’ largest supermarket chain, has been particularly affected. Its website and mobile application have returned online, but home grocery deliveries are not expected to resume until Friday, 23 October.
Orders scheduled before that date have been cancelled, while the company continues preparations for a gradual restoration of its online delivery service.
The incident also interrupted some supply and distribution arrangements, resulting in shortages on supermarket shelves in parts of the Netherlands and Belgium.
In Belgium, Delhaize has restored its online shopping operations. Certain promotional and personalised services were still experiencing difficulties, although the parent company confirmed that its Belgian e-commerce business was operational again.
Dutch retailers Etos and Gall & Gall have also restored their websites. Meanwhile, several American supermarket brands owned by Ahold Delhaize have continued to experience service interruptions.
The group said it expected additional online services in the United States to become available over the coming days.
Ahold Delhaize said it notified the Netherlands’ National Cyber Security Centre within 24 hours of detecting the malicious activity.
The company has subsequently provided updates to the authorities and, on Monday, confirmed that a formal police report had been submitted.
Chief executive Frans Muller defended the decision to shut down digital systems, arguing that the investigation had demonstrated the necessity of taking preventive action.
The company has not identified the perpetrators, confirmed whether ransomware was involved or disclosed the technical method used to gain access to its infrastructure.
These distinctions are important because malicious activity does not necessarily establish that information was stolen or that attackers obtained control over every system subsequently taken offline.
The retailer has instead described a controlled restoration process intended to ensure that affected systems can be brought back into operation without exposing the business to further risks.
Ahold Delhaize operates thousands of supermarkets and related retail businesses, including Albert Heijn, Delhaize, Food Lion, Giant Food, Hannaford and Stop & Shop.
Its geographical reach means that a disruption originating within shared corporate infrastructure can affect several national markets, even where individual retail chains maintain separate commercial operations.
The attack comes amid increasing scrutiny of the vulnerability of European food retailers to digital disruption.
Earlier this month, investigators in France began examining cyberattacks against refrigeration control systems used by hundreds of supermarkets.
Those incidents reportedly affected equipment at chains including Carrefour, Intermarché and Monoprix, with some retailers forced to discard products after refrigeration systems malfunctioned.
There is no established connection between the French incidents and the attack affecting Ahold Delhaize.
Nevertheless, both episodes illustrate the dependence of modern retail operations on interconnected digital systems supporting stock management, refrigeration, logistics, payments and customer services.
The consequences of a serious cyber incident can extend beyond the loss of access to websites. Interruptions to inventory systems, warehouse operations or communications with suppliers can affect the availability of physical products.
This creates particular difficulties for food retailers, where delays in transport and storage can result in the loss of perishable goods.
The incident also draws attention to the European Union’s NIS2 cybersecurity framework, which establishes stricter risk-management and incident-reporting obligations for organisations operating in designated sectors.
Food production, processing and distribution are among the activities covered by the directive, although its application to particular companies and operations depends on the relevant legal definitions and national implementing arrangements.
The legislation requires organisations within its scope to establish appropriate cybersecurity protections, address supply-chain risks and notify competent authorities of significant incidents.
Separately, the General Data Protection Regulation establishes notification requirements where personal-data breaches meet the relevant reporting threshold.
Ahold Delhaize’s statement that it has found no evidence of sensitive data being taken does not conclude the technical investigation, but it means that a confirmed theft of personal information should not presently be presented as a fact.
For the company, the immediate challenge remains restoring online services while maintaining normal supermarket operations. The wider commercial consequences, including the cost of the interruption and its effect on sales, have not yet been quantified publicly.
The attack began overnight on 11–12th October, when intruders gained access to remotely managed refrigeration equipment and altered operating settings, causing refrigerators and freezers to overheat.
Stores belonging to several major supermarket chains were affected, including Intermarché, Netto, Coopérative U, Carrefour and Monoprix. Some were forced to discard substantial quantities of fresh and frozen food.
French Finance Minister Roland Lescure confirmed that approximately 700 of the country’s 10,000 supermarkets had been affected, although the severity of the disruption varied between locations.
The Paris prosecutor’s office has opened an investigation into the attack, including the damage caused by destroyed merchandise and reported fires.
The incident has drawn attention to industrial control systems that are routinely connected to the internet but may receive less cybersecurity protection than corporate networks and customer databases.
Investigators have established that refrigeration equipment was targeted through vulnerabilities associated with remote monitoring and control systems.
The French cybersecurity authorities identified compromises involving products supplied by Danish manufacturer Danfoss and American company Copeland.
Some of the affected systems used older equipment that no longer received regular security updates.
According to information released by the companies and cybersecurity specialists, certain industrial controllers had been accessible through public internet connections, creating opportunities for unauthorised access.
Hackers reportedly manipulated defrost cycles and increased temperature settings, preventing equipment from maintaining the cold conditions required to preserve food.
The attack affected approximately 300 Intermarché and Netto stores, while Coopérative U reported disruption at around 80 outlets.
Several retailers managed to contain the damage, but others lost substantial quantities of stock.
The consequences extended beyond malfunctioning equipment. Businesses faced the cost of replacing spoiled food, repairing refrigeration systems and restoring normal operations.
The precise financial damage is still being assessed, although estimates from the retail sector indicate that losses across France could amount to tens of millions of euros.
The incident illustrates the security problems created by the growing use of internet-connected industrial equipment.
Modern refrigeration installations allow contractors and maintenance specialists to monitor temperatures, adjust settings and diagnose faults remotely.
These arrangements can reduce operating costs and improve efficiency, but they also create additional access points that attackers may exploit.
Cybersecurity specialists have identified vulnerabilities in commercial refrigeration platforms manufactured by Danfoss and Copeland.
The manufacturers subsequently addressed identified flaws, although older or unsupported equipment remained a concern.
A critical problem for businesses is that industrial machinery often remains operational for many years after its original software has become obsolete.
Replacing entire refrigeration installations can involve substantial expense and operational disruption, encouraging operators to retain equipment that may no longer meet contemporary cybersecurity standards.
The risks are particularly difficult to manage when responsibility for maintenance, software updates and network security is divided between retailers, equipment suppliers and external contractors.
The attack has renewed scrutiny of France’s implementation of the European Union’s NIS2 Directive, which is intended to strengthen cybersecurity across sectors providing important economic and public services.
The directive establishes common requirements covering risk management, incident reporting, organisational responsibility and protection against cyber threats.
Its scope extends beyond traditional critical infrastructure such as energy, telecommunications and transport to include certain businesses involved in food production, processing and distribution.
EU member states were required to incorporate the directive into national legislation by 17 October 2024.
France was among the countries that received a formal warning from the European Commission in May 2025 over incomplete implementation.
French cybersecurity specialists have since warned that delays have complicated efforts to establish consistent obligations for organisations operating industrial and commercial systems.
However, NIS2 does not automatically cover every supermarket. Its application depends on the nature and size of an organisation and the provisions of national implementing legislation.
The incident therefore raises questions not only about the pace of legislative implementation but also about the practical protection of equipment already in use.
The disruption demonstrates how a cyberattack can cause physical damage without directly targeting a conventional industrial facility.
Unlike breaches intended to steal customer information, the French incident interfered with machinery responsible for preserving essential products.
The distinction is important for European policymakers, who increasingly face threats to infrastructure that combines digital controls with physical operations.
The European Union’s cybersecurity agency ENISA has organised cross-border exercises to test how authorities and companies would respond to disruption affecting essential services.
The attack itself has been established, but responsibility for it has not been publicly attributed.
French authorities have said there is no immediate threat to national food supplies. Nevertheless, the destruction of merchandise and interruption of ordinary retail operations have demonstrated the potential economic consequences of weaknesses in relatively commonplace equipment.
The continuing investigation must establish how access was obtained, which systems were compromised and whether the vulnerabilities were known to operators before the attack.
For Brussels and national regulators, the case provides a practical test of whether European cybersecurity legislation can translate into effective protection for the connected equipment on which ordinary commercial activities increasingly depend.
Tasos Katopodis/Getty Images for Semafor World Economy
Corporate leaders tend to be enthusiastic about AI's potential — and increasingly concerned about the cybersecurity challenges the technology brings.
Tim Walsh, CEO and chair of KPMG US, said the worries come up in nearly every meeting he has with fellow leaders, as AI gives bad actors new ways to try to breach corporate defenses.
"The cyber risks have just elevated to places that we've never seen them before," he told Business Insider.
Walsh pointed to the Hugging Face incident this past summer, in which OpenAI said an AI agent bypassed controls during an internal cybersecurity evaluation and accessed parts of the open-source AI platform's systems.
There isn't currently a defensive wall, he said, that's capable of rebuffing every cyber threat. He said KPMG is working with the frontier AI model developers and others on further protections.
The goal is to help the Big Four firm protect its business, and its clients' businesses, Walsh said, adding that he sees it as a potential opportunity worth more than $1 billion.
Unease about AI and cyber threats showed up in a recent KPMG US survey of 400 CEOs at major US companies. While leaders reported confidence in AI's potential, cybersecurity was the concern they identified most often.
Eighty-five percent said cybercrime and "cyber insecurity" could affect their company's prosperity over the next three years — more than said the same about inflation, geopolitical tensions, the pace of technological change, or other risks.
Cybersecurity was also the most commonly cited challenge to implementing AI. It topped ethical questions, data readiness, cost management, and translating AI spending into measurable returns.
Leaders said they were particularly concerned about identity theft and data privacy, vulnerability to cyberattacks, and fraud detection and prevention. Nearly half said they planned to increase cybersecurity investment over the next three years, citing threats including AI-powered social engineering, AI-assisted phishing or malware, and data and privacy risks tied to AI agents.
The concern is shaping the kinds of work the firm wants to do for clients.
Walsh said KPMG is building what he described as a managed cyber-defense business centered on AI, meant to serve as a "shield and defense mechanism" for companies. KPMG already has a cybersecurity business, he said, though this would be a different offering built around AI.
The company also sees a growing need to check whether the AI systems organizations deploy are doing what they are supposed to do. KPMG already helps clients assess AI-related controls and governance. Walsh said the firm is developing additional services to verify that AI agents are operating as intended and give investors and others confidence that companies can control them.
"Trust around AI is a real thing," he said.
The White House’s artificial intelligence task force adopted its charter Thursday, opening a 120-day window to advise on how much of an oversight role Washington should take.
The post White House AI Task Force Adopts Charter, Starts 120-Day Clock appeared first on Breitbart.
The 2026 edition of the INNOVA Innovation for Society Competition brought together 11 projects from Cuban companies, institutions, and MSMEs this Tuesday, presented in a hybrid format before a experts panel. The event showcased applications of science, technology, and innovation across sectors such as energy, health, business management, tourism, and cybersecurity.
RELATED:
International InnoLabs Project Strengthens Innovation at Cuban University
The Informatics and Communications Business Group (GEIC) organized the event, combining in-person participation in Havana with virtual presentations from various provinces. According to organizers, this format allowed participants to showcase homegrown solutions to real-world problems and highlighted the talent of young people driven to innovate and develop.
A key project was TECXOL—the “National Ecosystem for the Intelligent Management of Photovoltaic Parks”—presented by Darien Armenteros Fernández of XETID. The platform is already implemented at the Mariel site and enables data capture and processing for autonomous decision-making.
Designed as an open, scalable system, TECXOL can be extended to microsystems and other forms of energy storage. It features constant monitoring and early warning systems, aligning with the goal of energy sovereignty.
Similarly, the MSME TECNOPRO SRL, based in Santiago de Cuba, presented LOCALLIGHT PLUS, a backup power monitoring system that integrates temperature, voltage, and efficiency controls. The project envisions future integration with solar panels under a circular innovation model.
The University of Camagüey contributed two research projects focused on applying Artificial Intelligence (AI) to specific social issues.
Grupo Empresarial de la Informática y las Comunicaciones celebró la edición 2026 del Concurso de Innovación para la Sociedad INNOVA. El evento, se consolidó no solo como una vitrina de premios, sino como un espacio de confluencia. pic.twitter.com/yI1Y46pRVC
— Empresa Comercializadora Camilo Cienfuegos (@CamiloEmpresa) October 13, 2026
The text reads, “The Informatics and Communications Business Group held the 2026 edition of the INNOVA Innovation for Society Competition. The event established itself not merely as a showcase for awards, but as a space for convergence.”
Additionally, Brian Jesús Ávila Sánchez presented the intelligent digitization of historical records regarding monoclonal antibody production at the Center of Molecular Immunology (CIM). The project employs open-source tools and predictive modeling to recover handwritten documents and create a digital twin capable of classifying and optimizing production batches. Its goal is to boost efficiency in a strategic area of Cuban public health.
José Enrique Domínguez presented a web-based system for predicting water potability, developed in collaboration with the Provincial Center for Hygiene, Epidemiology, and Microbiology. The tool digitizes and automates sample analysis, classifies potability using AI, generates statistics, and issues critical alerts to support health-related decision-making.
ETECSA showcased a dashboard for effective cost management, leveraging the smart use of office software like Excel. The proposed solution is designed to be applicable to any organization in the country.
In the tourism sector, the Specialized Services Company GET presented the Tourism Intelligence Platform, which centralizes data on reservations, occupancy rates, and market trends. Already in use at two tourist hubs, the tool is set to expand into nautical and transport sectors, incorporating behavioral prediction and historical analysis capabilities.
DAPISOFT RG S.L.R., based in Granma, presented three solutions: SISMOS, a real-time seismic monitoring platform using low-cost sensors that can integrate with official infrastructure; CxCobrar, a tool for managing accounts receivable that utilizes predictive algorithms and requires minimal resources; and ISISCAI, an IT asset control and security system featuring automated audits.
🇨🇺 Cuba’s economy continues to navigate challenges while pursuing growth and development.
— teleSUR English (@telesurenglish) October 8, 2026
Despite external pressures and economic difficulties, the island is strengthening key sectors and pursuing new opportunities to boost production, investment, and social development.
📈… pic.twitter.com/n5bsOkG53V
The most unsettling failure in digital payments may not be a black screen. Imagine a fraud-detection model that remains online but suddenly flags thousands of legitimate transfers as suspicious. Banks may see functioning servers while customers see rejected payments, delayed salaries and complaints no single institution can explain. This is a hypothetical scenario, not a […]
The post The AI risk no bank can manage alone appeared first on Asia Times.
Poland is confronting an unprecedented school security crisis after a succession of violent attacks by young people triggered widespread fear, school closures and a nationwide police mobilisation. By Sunday, 11 October, officers had detained 117 people and conducted nearly 64,000 security checks at educational establishments, as the authorities attempted to contain both genuine threats and an escalating campaign of intimidation on social media.
The crisis reached its height on Friday, 9 October, when warnings circulated about a supposed nationwide killing campaign known as “Bloody Friday”. Videos, threatening messages and lists of potential targets spread through TikTok, messaging platforms and school discussion groups, prompting parents to keep children at home and several local authorities to suspend classroom teaching.
Although police have found no evidence of an organised nationwide conspiracy, the violence that preceded the rumours was real. Three separate attacks took place between 7 and 10 October, while investigators are examining hundreds of other incidents involving threats or suspected criminal activity.
The first major incident occurred on Wednesday, 7 October, at a vocational school in Ostrołęka, north-east of Warsaw. A 19-year-old student armed with a machete attacked pupils, teachers and other people in and around the building, injuring nine victims before harming himself.
Investigators subsequently discovered a homemade explosive device inside his backpack. The suspect was arrested, and prosecutors brought nine charges against him, including attempted murder. The discovery of explosives raised further questions about the extent of his preparations and the possibility of a substantially higher death toll.
The following day, a 15-year-old former pupil entered a primary school in Leszczydół-Nowiny, near Wyszków, and attacked three members of staff with a knife. A 37-year-old caretaker died from her injuries, while two teachers, including the headteacher, were wounded.
According to investigators, the teenager wore a helmet-mounted camera, raising suspicions that he intended to record the assault. The official prosecution statement confirmed the victim’s death and the detention of the suspect.
The attacks were followed by threatening messages from other teenagers, including a video attributed to a 17-year-old in the Przasnysz district who claimed to be participating in a competition involving killings. Police subsequently detained him. In Sierpc, another 17-year-old was arrested after allegedly discussing plans for violence at school; officers discovered two knives.
The rumours produced an immediate reaction. Schools in Wyszków, Ciechanów, Pułtusk and other municipalities cancelled classroom teaching or introduced remote lessons. Elsewhere, parents independently withdrew their children, leaving some classrooms largely empty.
Police launched an extensive preventive operation, deploying additional officers around schools and investigating online threats.
According to the figures released on 11 October, the authorities had recorded 275 incidents requiring investigation, detained 117 people and carried out nearly 64,000 checks at schools, nurseries and other educational facilities.
The situation deteriorated further on Saturday, 10 October, when a 21-year-old student attacked three people at a post-secondary educational institution in Warsaw. Two 17-year-old girls and a 24-year-old woman were injured. One victim required hospital treatment, although none of the injuries was considered life-threatening.
Interior Minister Marcin Kierwiński subsequently stated that investigators had established no links between the recent attacks. The authorities nevertheless remain concerned about imitation offences, particularly where threatening material circulates among teenagers through closed online communities.
The events have also raised questions about whether hostile foreign actors deliberately amplified the crisis. Tomasz Siemoniak, Poland’s minister responsible for coordinating the intelligence services, warned that Russian organisations routinely exploit domestic emergencies to spread disinformation and undermine confidence in public institutions.
In his statement on 9 October, Siemoniak acknowledged the possibility of foreign involvement but stressed the need for evidence before assigning responsibility.
There is, at present, no publicly established evidence that Moscow organised the school attacks or directed the subsequent threats. Nevertheless, the rapid circulation of alarming videos, fabricated warnings and unverified target lists illustrates how genuine violent incidents can be exploited to disrupt everyday life without further physical attacks.
The episode also presents a challenge for European regulators. Poland is examining measures against dangerous online content, while its existing obligations under the EU Digital Services Act provide a framework for addressing systemic risks associated with major platforms.
For Donald Tusk’s government, the immediate priority is preventing further attacks as schools reopen under heightened security. The longer-term challenge concerns the interaction between online radicalisation, copycat violence and disinformation capable of transforming isolated crimes into a national emergency.
Login