CERT Polska / NASK

https://cert.pl/en/news/

Polish CERT, strong on Russia-adjacent threats and OT incidents. 2026-05-08 audit: WebFetch returned 5 dated posts incl. 'Annual report 2025' 2026-04-08. | 2026-06-20 full audit (v2.62): live=Y, drill=Y. FETCH → webfetch https://cert.pl/en/news/ (listing) then webfetch the per-post cert.pl/en/posts/... URL for body. AVOID: No issues, WebFetch returns clean dated listing and substantive detail pages. No bridge needed.. | 2026-07-05 admiralty audit: A (primary-authority), Polish national CERT (NASK), original first-hand research; live, WebFetch clean. Status stays active. | 2026-08-04 run: RECIPE FIX; the tracked /en/news/ path does NOT list CERT-PL coordinated-disclosure CVE advisories (newest /news/ item was 2026-06-12 while the 2026-07-27 cJSON advisory existed). Advisories live at https://cert.pl/en/posts/<YYYY>/<MM>/<CVE-ID>/ and the per-advisory page carries a "Publication date" TABLE ROW (an HTML-tag strip collapses it, read the raw body around the label). FETCH → drill /en/posts/ per advisory; an essential-tier source was effectively dark for advisory discovery through /news/ alone. | 2026-08-05: RECIPE DRIFT, https://cert.pl/en/posts/ now returns HTTP 403 to WebFetch, the bridge AND the reader, so the per-advisory drill path recorded above is currently blocked. https://cert.pl/en/news/ still returns HTTP 200 via the bridge, so the source is alive and /news/ is the working discovery surface again. Do NOT demote on the 403 (transport block, not death); re-probe /en/posts/ each run and restore the drill recipe when it clears. | 2026-08-05: RSS RECIPE, with both HTML listings unusable this run (/en/posts/ 403, /en/news/ no drillable dated rows), the feeds https://cert.pl/en/rss.xml (English) and https://cert.pl/rss.xml (Polish) both return HTTP 200 with dated advisory items linking to /en/posts/<YYYY>/<MM>/<CVE-ID>/. Prefer the feed for discovery.