ThreatCluster

Massive Power Outage Affects Spain, Portugal, and France

First seen 2 Dec 2025, 18:33 UTC • •41

Article Content

1 / 3

Browse articles

ThreatCluster •March 12, 2026 at 13:27 UTC

In late April, a significant power outage impacted Spain, Portugal, and parts of southwestern France, leaving tens of millions without electricity for hours. The outage caused widespread disruptions, including halted trains, cancelled flights, and gridlocked roads due to non-functional traffic lights. Restoration of power took 10 hours, with full services returning after 23 hours.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 220d ago How this analysis works

More articles in this cluster (2)

Threat Graph

13 entities, 17 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (3)

Lateral Movement
Ransomware
Privilege Escalation

Organization (1)

JSC NEK Ukrenergo

Affected Platform (7)

BeOS
DNP3
GE JungleMUX
Scada
Windows 7
Windows NT4
Windows XP

Tool (2)

CACAO Playbooks
SOARCA

Relationships

Lateral Movement targets BeOS
Lateral Movement targets DNP3
Lateral Movement targets GE JungleMUX
Lateral Movement targets Scada
Ransomware targets BeOS
Ransomware targets DNP3
Ransomware targets GE JungleMUX
Ransomware targets Scada
Privilege Escalation targets BeOS
Privilege Escalation targets DNP3
Privilege Escalation targets GE JungleMUX
Privilege Escalation targets Scada
CACAO Playbooks related to JSC NEK Ukrenergo
CACAO Playbooks related to Windows 7
CACAO Playbooks related to Windows NT4
CACAO Playbooks related to Windows XP
CACAO Playbooks related to SOARCA

Following this threat?

Track JSC NEK Ukrenergo in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…

Silent Lynx Targets CIS Governments via WinRAR Exploit The threat actor Silent Lynx has launched a series of attacks against government organizations in the Commonwealth of Independent States (CIS) from June 2025 to August 2026. These attacks exploit a vulnerability in WinRAR (CVE-2025-8088) to deploy reverse shells, including FoalShell and PickleShell, facilitating…