← Back
CTI
Cyber Threat Intelligence analysis and risk assessment for a Breton green-energy producer, after the coordinated 29 Dec 2025 attack on Polish energy infrastructure. OSINT research, role-play CEO defence, and actionable recommendations.
STACK
HIGHLIGHTS
- OSINT study of the attack on Polish energy infrastructure (29 Dec 2025): attack-chain reconstruction, compromised perimeters, TTPs, and indicators of compromise.
- Attribution and profiling: characterisation of likely threat actors, motivations, comparison with similar operations.
- Target profile, fictional: a Breton green-energy producer (wind turbines and tidal power) supplying individuals and large structures in Finistère. Internet exposure, partner ecosystem, regulatory constraints (NIS2, OIV energy sector).
- Risk assessment: transposing the Polish scenarios to the Breton ecosystem, modelling plausible intrusion paths, identifying critical assets and business impact (production outage, SCADA sabotage, reputational damage).
- Actionable recommendations: OT and IT hardening, segmentation, monitoring and detection, IoCs to watch, incident-response plan. Final readout to the CEO in role-play, with a justified residual-risk level.