- What: Poland bans Signal use for government officials due to cyberattacks
- Impact: Targeted social engineering and account takeover attempts
Government security Poland directs officials to cease Signal use amid cyberattack concerns May 20, 2026 Share By SC Staff (Adobe Stock) As reported by Security Affairs, Poland has instructed government officials to discontinue the use of the popular instant messaging application Signal for sensitive communications. This directive follows a series of cyberattacks targeting government accounts, with suspicions pointing towards Russian-backed advanced persistent threat (APT) groups. The cyberattacks did not compromise Signal's encryption but instead relied on social engineering and account takeover tactics. Attackers impersonated Signal support staff or bots to trick users into revealing verification codes or PINs. Another method involved malicious QR codes or links that allowed attackers to remotely link their devices to victims' accounts, granting access to private chats and conversation history. These campaigns targeted politicians, military personnel, and public servants, posing a significant threat to national security. In response, Poland's Ministry of Digital Affairs is recommending the use of state-developed alternatives, including mSzyfr Messenger for general encrypted communication and SKR-Z for classified information up to the "Restricted" level. This move aligns with similar actions in other European countries, such as Germany and the Netherlands, highlighting a broader trend of governments seeking more controlled communication platforms due to the vulnerability of users to phishing and impersonation attacks, rather than inherent flaws in the encryption of widely used apps. Source: Security Affairs SC Staff Related Government security CISA contractor’s public GitHub repo exposed sensitive government credentials SC Staff May 19, 2026 The repository, named "Private-CISA" and maintained by contractor Nightwing, exposed AWS administrative credentials, access keys, tokens, plaintext usernames and passwords for internal CISA systems, and SSH keys. OT Security Iran suspected in breaching automatic tank gauges at US gas stations Laura French May 19, 2026 The automatic tank gauge systems were reportedly exposed online without passwords. Government security Recovery is the new cyber deterrence Cory Simpson May 18, 2026 Why resilience and quick recovery can deter potential attacks. Get daily email updates SC Media's daily must-read of the most current and pressing daily news Business Email By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy . Subscribe You can skip this ad in 5 seconds