Originally published on satyamrastogi.com
CERT.PL confirmed exploitation of private APNs as attack vector against Polish critical infrastructure. Attack chains through telecom carrier segregation to compromise second energy facility's industrial control systems.
Private APN Pivoting: Polish Energy Grid RCE via Telecom Infrastructure
Executive Summary
CERT.PL's disclosure of a novel private APN (Access Point Name) exploitation chain represents a fundamental shift in critical infrastructure targeting. Attackers successfully leveraged carrier-provisioned private APNs - typically considered isolated network segments - to pivot into operational technology (OT) environments at a second Polish energy facility.
