Critical Infrastructure
Over roughly two weeks, hackers broke into systems at several US water plants, in attacks TechCrunch reports were allegedly carried out by the Iranian government. This synthesis separates what is confirmed about the campaign from what remains contested, including the attribution fight.
Policy & Government
Germany's cabinet cleared the biggest overhaul of its spy laws since the war, letting the BND and BfV hack foreign systems, sabotage adversaries' supply chains, and feed false information to extremists at home. The domestic-disinformation power is already the most contested piece.
Artificial Intelligence (AI)
A follow-on to Dream's Taiwan disclosure: The Register reports the government target hit by the near-autonomous agentic swarm was the country's nuclear safety agency, the highest-stakes autonomous-agent target on record, even though the attack's success stays unconfirmed.
Nation-State Cyber Threats
Check Point pins the exploited afd.sys zero-day, CVE-2026-68820, on North Korea's Lazarus Group. In this wave of Operation Dream Job, the attackers used a post-quantum handshake to shield exploit delivery before dropping the ForestTiger backdoor. CISA set an August 25 patch deadline.
Artificial Intelligence (AI)
Israeli cyber firm Dream says it documented the first publicly known near-autonomous AI attack on a government target. Aimed at Taiwan, the multi-agent framework adapted mid-operation, corrected its own mistakes, and expanded to a nuclear safety agency and energy firms as it went.
Vulnerabilities
Microsoft's August 2026 Patch Tuesday is one of the largest on record: 421 CVEs by Rapid7's count, 62 rated critical, and a use-after-free in the afd.sys kernel driver that North Korea's Lazarus group used as a zero-day to reach SYSTEM. Patch that one first.
Critical Infrastructure
A Forescout scan counted more than 4,400 internet-exposed Rockwell PLCs worldwide — and 22 of them sit in the exact cities where water utilities were attacked. Here is what the numbers show, what defenders can verify today, and what is still unconfirmed.
Critical Infrastructure
The water campaign keeps growing. Cyberattacks have reportedly hit at least 12 US states, per SecurityWeek — and Georgia's Clayton County confirmed a pump-station disruption, the latest named operational impact in a campaign that began with 30-plus Minnesota systems.
Critical Infrastructure
The water-sector campaign just got bigger. WIRED reports systems in seven US states hit by attacks likely tied to Iran — beyond the 30-plus Minnesota systems first disclosed. What every water utility should verify now, and what's still unnamed.
Nation-State Cyber Threats
A browser-update prompt on hotel captive-portal Wi-Fi is the whole attack. Microsoft's CaptiveCrunch campaign, attributed to a Russian sub-cluster of Midnight Blizzard, delivers the CornFlake RAT to travelers. The defense is a short, enforceable checklist, not awareness in the abstract.
Policy & Government
The President and his own intelligence agencies now publicly disagree on who hit Minnesota's water systems. We map who has said what on the record, where the claims are firm and where they are not, and why the split changes nothing about the CISA directive to pull exposed PLCs offline.
Artificial Intelligence (AI)
The autonomous campaign Unit 42 tied to a Chinese-speaking operator now has a named toolchain: DeepSeek run inside the open-source Hermes framework, commanded over Telegram. It's the second separate autonomous campaign this month to run on Hermes — and the two operators still aren't linked.