critical infrastructure news
13 stories
Warlock Ransomware Still Exploits Year-Old SharePoint Flaws to Hit Critical Infrastructure
The Warlock ransomware group, tracked by Symantec as Longlegs and also known as Storm-2603, continues to exploit unpatched vulnerabilities in Microsoft SharePoint, more than a year after these flaws were initially publicized. The group, which has historical ties to China-nexus clusters CL-CRI-1040, CamoFei, and ChamelGang, has recently targeted critical infrastructure, including water…
'Warlock' ransomware used in attacks on critical infrastructure in Portuguese, Spanish-speaking countries
A Chinese threat group is reportedly deploying "Warlock" ransomware in attacks targeting critical infrastructure organizations in Portuguese and Spanish-speaking countries. The campaign exploits various vulnerabilities within Microsoft SharePoint, according to recent analysis from the Symantec Threat Hunter Team.
US is looking to weave AI into critical infrastructure for cybersecurity, national cyber director says
The U.S. government is actively collaborating with operators of critical infrastructure to integrate artificial intelligence into vital national systems, aiming to bolster cybersecurity defenses. National Cyber Director Sean Cairncross stated that efforts are underway to deploy AI models across various sectors swiftly to secure these systems.
OpenAI Announced $1B in Defensive Tools for Water Utilities
OpenAI has announced a $1 billion commitment to provide subsidized access to its Daybreak AI cybersecurity tools for under-resourced critical infrastructure defenders. The initiative, named Daybreak for Frontline Defenders, was unveiled on September 3, 2026, and aims to equip organizations protecting essential services in the United States and internationally with advanced cyber models,…
OpenAI Pledges $1 Billion to Bring Frontier AI to Critical Infrastructure Defenders
OpenAI has announced a new initiative, dubbed "Daybreak," committing $1 billion to enhance the cybersecurity capabilities of critical infrastructure defenders through advanced artificial intelligence tools. The program aims to provide subsidized AI resources, coupled with training and technical support, to bolster the defenses of essential services against evolving cyber threats.
U.S. Sanctions Iran-Linked Hackers Behind Critical Infrastructure Breaches
The U.S. Department of the Treasury has reportedly imposed sanctions on approximately 60 Iran-linked entities and individuals. Among those sanctioned is a cyber group that is reportedly affiliated with Iran's Ministry of Intelligence and Security (MOIS). This group is accused of conducting widespread breaches targeting U.S. critical infrastructure, alongside engaging in financially motivated…
Iran-linked cyberattack shut down a UK power plant
A small-scale power plant in the United Kingdom was shut down for four days due to a suspected cyberattack, which government officials confirmed on Monday. While the UK government has not formally attributed the incident, it is believed to be linked to Iran. Authorities emphasized that the wider energy system was never at risk, describing it as "highly resilient."
US agencies warn of AI-powered attacks on Siemens industrial controllers
Multiple U.S. federal agencies have issued a joint alert regarding active threats to Siemens S7 Series programmable logic controllers (PLCs) across critical infrastructure sectors. The National Security Agency (NSA), Cybersecurity and Infrastructure Security Agency (CISA), Federal Bureau of Investigation (FBI), Department of Energy (DOE), and Environmental Protection Agency (EPA) confirmed…
In Other News: AI Slop Limits Apple Bounties, North Carolina Port Attacks, Hackers Target Wall Street
Recent reports indicate a series of cybersecurity incidents across various sectors, including a notable restriction on Chinese data center technology, a supply chain compromise affecting QuickFox VPN, and a successful phishing attack against IEH Corporation. Further developments suggest that the proliferation of AI-generated content might be complicating Apple's bug bounty program, a North…
Coast Guard says it is monitoring cyberattack that disrupted North Carolina’s ports
The U.S. Coast Guard is actively monitoring a cyberattack that disrupted gate operations at all three North Carolina port facilities this week. The incident, which began earlier in the week, affected the Port of Wilmington, the Port of Morehead City, and the Charlotte Inland Port.
Found fast, fixed slow: The gap the AI clearinghouse must close
A recently established AI cybersecurity clearinghouse, mandated by an executive order, is tasked with coordinating the discovery and patching of software vulnerabilities within critical infrastructure. The initiative aims to address the growing gap between the rapid pace of AI-driven vulnerability identification and the slower, more complex process of remediation.
'BusySnake' Infostealer Slithers Into Critical Infrastructure Networks
A sophisticated information-stealing malware dubbed 'BusySnake' has been detected actively targeting critical infrastructure sectors. Threat actors operating under the moniker 'Armored Likho' have reportedly achieved successful infiltrations into government and electrical power organizations located in Russia, Brazil, and Kazakhstan.
NCSC CEO: Hostile states linked to three-quarters of cyber attacks affecting UK's critical systems
The head of the UK's National Cyber Security Centre (NCSC) has stated that approximately three-quarters of cyber attacks targeting the nation's critical infrastructure over the past year have been linked to hostile state actors. Dr. Richard Horne, CEO of the NCSC, revealed this figure during a speech at the Royal United Services Institute's (RUSI) Annual Security Lecture.