Cyber Security News

Hacking Editorial Brief — August 1, 2026

Federal Investigation Links Water System Intrusions to Iranian Threat Actor

The FBI confirmed that threat actors targeted water utility providers in at least seven states, compromising internet-exposed programmable logic controllers and causing loss of pressure and flooding at affected facilities. The agency's investigation, disclosed late Thursday, identified the attackers as Iranian-linked operators conducting a coordinated infrastructure campaign. Over 30 municipal water systems in Minnesota were affected, with researchers at Sublime Security assessing the operation aims to generate psychological impact rather than immediate physical destruction. The campaign represents the most extensive targeting of U.S. water infrastructure since CISA issued warnings about increased reconnaissance activity against operational technology systems.

Chinese-Speaking Actor Deploys Autonomous AI Attack Framework

Palo Alto Networks Unit 42 researchers documented a Chinese-speaking threat actor leveraging the DeepSeek AI model and Hermes Agent framework to conduct autonomous cyberattacks against seven distinct vulnerabilities across Langflow, n8n, Citrix NetScaler, and other infrastructure platforms. The campaign marks the first publicly documented use of commercially available AI models integrated into an operational attack framework for widespread exploitation. Separately, SOCRadar identified a North Korean-linked social engineering operation targeting cryptocurrency and Web3 professionals through fraudulent job interviews and interactive web portals designed to deliver remote access trojans. The campaign employs fake macOS update screens with clipboard manipulation to steal cryptocurrency wallet credentials and developer access tokens.

Sources: PCMag · JPost · Unit 42 · Infosecurity Magazine · Cybersecurity News