ThreatCluster

Massive Power Outage Affects Spain, Portugal, and France

First seen 4 Nov 2025, 11:10 UTC • •26

Article Content

1 / 3

Browse articles

ThreatCluster •March 12, 2026 at 13:27 UTC

In late April, a significant power outage occurred across Spain, Portugal, and parts of southwestern France, impacting tens of millions of residents. The outage resulted in cities losing electricity for hours, halting trains and metro services, canceling flights, and disrupting mobile networks and internet providers. Power was restored after 10 hours, but full service was not resumed for 23 hours.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 220d ago How this analysis works

More articles in this cluster (2)

Threat Graph

13 entities, 17 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (3)

Lateral Movement
Ransomware
Privilege Escalation

Organization (1)

JSC NEK Ukrenergo

Affected Platform (7)

BeOS
DNP3
GE JungleMUX
Scada
Windows 7
Windows NT4
Windows XP

Tool (2)

CACAO Playbooks
SOARCA

Relationships

Lateral Movement targets BeOS
Lateral Movement targets DNP3
Lateral Movement targets GE JungleMUX
Lateral Movement targets Scada
Ransomware targets BeOS
Ransomware targets DNP3
Ransomware targets GE JungleMUX
Ransomware targets Scada
Privilege Escalation targets BeOS
Privilege Escalation targets DNP3
Privilege Escalation targets GE JungleMUX
Privilege Escalation targets Scada
CACAO Playbooks related to JSC NEK Ukrenergo
CACAO Playbooks related to Windows 7
CACAO Playbooks related to Windows NT4
CACAO Playbooks related to Windows XP
CACAO Playbooks related to SOARCA

Following this threat?

Track JSC NEK Ukrenergo in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…

Silent Lynx Targets CIS Governments via WinRAR Exploit The threat actor Silent Lynx has launched a series of attacks against government organizations in the Commonwealth of Independent States (CIS) from June 2025 to August 2026. These attacks exploit a vulnerability in WinRAR (CVE-2025-8088) to deploy reverse shells, including FoalShell and PickleShell, facilitating…