Critical Infrastructure

Navy duotone documentary: a water-treatment plant with one red location marker — cyberattacks on water systems across seven US states, likely tied to Iran.

Seven States' Water Systems Hit by Cyberattacks Likely Tied to Iran — Scope Expands Beyond Minnesota

The water-sector campaign just got bigger. WIRED reports systems in seven US states hit by attacks likely tied to Iran — beyond the 30-plus Minnesota systems first disclosed. What every water utility should verify now, and what's still unnamed.

Navy editorial collage: a cut-out water tower between two opposing arrows, one in red — the Minnesota water-attack attribution split, Trump vs. US intelligence.

Policy & Government

Trump Blames Minnesota, His Agencies Blame Iran: The Water-Sector Attribution Split

The President and his own intelligence agencies now publicly disagree on who hit Minnesota's water systems. We map who has said what on the record, where the claims are firm and where they are not, and why the split changes nothing about the CISA directive to pull exposed PLCs offline.

Diagram of a mobile core network showing session hijacking and denial-of-service risks in the 4G and 5G signaling core.

Telecommunications Security

84 Flaws Found in 4G and 5G Core Networks, Including Live Session Hijacking

An NTU study disclosed a widespread class of 84 vulnerabilities in the signaling core of 4G and 5G networks — not the radio — including one that lets an attacker hijack a user's live session. The shared root cause is implicit trust between core network functions. Here is what operators should do.

Line illustration of a water-plant controller being disconnected from a public network, marked by a single red status dot.

Critical Infrastructure

CISA to Water Operators: Pull Exposed PLCs Off the Internet Now

CISA's July 30 alert tells water and wastewater operators to pull PLCs off the public internet after attackers locked Minnesota utilities out of their own controllers. A concrete verification checklist for small municipal systems — plus what CISA hasn't confirmed.

Flat white line-art of a folded memo document beside a water tower, on a deep teal background — the leaked memo tying the Minnesota water attacks to Iran.

Critical Infrastructure

Leaked Memo Confirms Iran Attribution for Minnesota Water Utility Attacks

From suspected attribution to a leaked internal memo — the Minnesota water attribution firms up this week.

Flat white line-art of a water tower linked to a control dial, on a teal background — the Minnesota water-system cyberattack.

Critical Infrastructure

30+ Minnesota Water Systems Hit in Coordinated Cyberattack — Iran-Linked CyberAv3ngers Suspected

Thirty water plants, one offline, one memo — the Minnesota attack scope lands this week.

Flat white line-art of a humanoid, a four-legged robot dog, and a grid inverter behind a checkpoint barrier, on a deep-blue background - the FCC import ban.

Policy & Government

US FCC Bans New Foreign-Made Humanoids, Robot Dogs, and Solar Inverters Over Cyber Risks

From robot dogs to rooftop solar, the FCC's new cyber-supply-chain ban lands this week, blocking new foreign-made humanoids, quadruped robots, and grid-connected inverters from the US market while existing installations stay put. The categories, the scope, and the open questions.

Flat white line-art of an industrial gear and a locked padlock on a crimson background — PTC Windchill flaw exploited in a Cl0p ransomware campaign.

Vulnerabilities

PTC Windchill Vulnerability Exploited in Cl0p Ransomware Campaign

From advisory to active ransomware — the PTC Windchill flaw is on the wire this week, and reporting now ties the exploitation to a Cl0p-style extortion campaign.

Flat white line-art of a factory gear, an open blueprint drawer, and a sealed envelope, on a teal background — Cl0p PTC Windchill and FlexPLM data-extortion campaign.

Ransomware

Cl0p Affiliates Chain PTC Windchill and FlexPLM Flaws for Unauthenticated RCE in Fresh Data-Extortion Campaign

Cl0p is back with a PTC Windchill and FlexPLM chain — a defender review for industrial-lifecycle customers this weekend.

Flat white line-art of a monitor showing a simulation flow model beside a shield, on a teal background — Rockwell Arena Simulation code-execution patches.

Vulnerabilities

Rockwell Publishes Patches for Code-Execution Flaws in Arena Simulation Software

A Rockwell industrial-simulation patch — defender verification across affected industrial deployments this weekend.

Flat white line-art of a water tower and an electricity pylon linked to an industrial controller box, on a deep amber background — CISA's advisory on Iran-linked targeting of ICS.

Iranian Threat Actors

CISA Warns Iran-Linked Actors Are Disrupting US Water and Energy Providers, Targeting Siemens and Schneider ICS

A CISA warning on Iran-linked disruption of US critical infrastructure — a defender review for water and energy operators this week.

Flat white line-art of a power meter beside a folder of customer records and an Australian map outline, on a teal background — Origin energy data breach.

Data Breaches

Australian Energy Giant Origin Confirms Customer Data Compromised in Cyberattack

An Australian critical-infrastructure disclosure lands — sector-advisory work for energy operators this week.

See all