Hackers breached a small Polish energy plant via private APN last year

A BleepingComputer security news digest covering active exploitation of critical vulnerabilities, ransomware, supply-chain compromises, OT intrusion, data breaches, credential theft, and cybercrime. Notable items include ransomware exploitation of SonicWall SMA1000 and Progress Kemp LoadMaster flaws, a zero-day Metabase SQL injection used for data theft, BdThemes WordPress supply-chain compromise creating rogue administrators, TrueConf installer trojanization, and a Polish energy plant breach through a private APN into an OT network.