The FBI, CISA, NSA, EPA, DOE, CNMF and Treasury warn of ongoing exploitation of internet-exposed PLCs by an Iranian-affiliated APT group, with activity observed since at least March 2026. Targets are Rockwell Automation/Allen-Bradley, Schneider Electric and Siemens PLCs in the Government Services and Facilities, Water and Wastewater Syste…
Tenable's Cybersecurity Awareness Month blog summarizes government guidance on defending critical infrastructure against nation-state and AI-assisted attacks. Per a joint US government advisory (published in April, updated in July), Iran-affiliated APT groups have attacked US water, energy and government facilities since Operation Epic Fu…
ESET Chief Security Evangelist Tony Anscombe reviews the main cybersecurity stories of August 2026 in a monthly video roundup. OpenAI disclosed more details on how its agents hacked the AI collaboration platform Hugging Face, and the video discusses what went wrong and the lessons from the incident. Iran-linked hackers are believed to hav…
TrendAI™ (Trend Micro) published its H1 2026 APT Activity Roundup on July 29, 2026. It finds nation-state actors used AI in more stages of the intrusion lifecycle than in any prior half-year the company has tracked. China-aligned actors used generative AI to refine exploits and iteratively build malware through "vibe coding", and one AI a…
Flashpoint's weekly Middle East brief for October 9-15 describes sustained kinetic escalation alongside cyber and information operations. Ansarallah (Houthis) ran a multi-day missile, drone and cruise-missile campaign against King Khalid International Airport in Riyadh. It killed at least 14 people and closed the airport through at least …