What we know about the alleged Iranian hacks on U.S. water utilities

Over the last couple of weeks, hackers have targeted and broken into the systems of several water plants in the United States. Here’s what we know and don’t know about this wave of attacks allegedly carried out by the Iranian government.

In a first, US will allow some private firms to carry out cyberattacks

The new order sweeps away decades of existing U.S. cybersecurity policy prohibiting private companies from conducting ‘hack back’ attacks or offensive cyber operations.

Samsung bans smart TV apps that share users’ internet connections with strangers

New security research offers a rare view inside residential proxy networks, which rely on apps that share a person’s internet connection with someone else.

US government says Iran-linked hackers are disrupting American water and energy providers

An updated government advisory warns that Iranian hackers are exploiting systems used by water and energy providers.

US charges Russian ‘bulletproof’ web hosts over cyberattacks that netted $62M from cybercrime victims

The 2024 indictment, now unsealed, accuses three Russians and two web hosts of aiding hackers and profiting from cybercrime.

The FBI built its own replica small town to simulate real-world cyberattacks

Hidden inside a building in Alabama, the FBI has created its own small town as a dedicated cyber training ground for simulating cyberattacks.

NSA said to be readying Anthropic’s Mythos for use in cyber operations

The U.S. eavesdropping agency is reportedly preparing Anthropic’s Mythos for use in cyberattacks, despite a federal ban on using the AI model maker.

Law enforcement shuts down VPN service used by two dozen ransomware gangs

First VPN promised hackers complete anonymity for their cyberattacks. But Europol said it was able to notify the service’s users that they have now been identified.

Scammers are abusing an internal Microsoft account to send spam links

The loophole allows spammers and scammers to send emails from a legitimate Microsoft email address typically used for sending genuine account alerts.

DOJ says ransomware gang tapped into Russian government databases

U.S. prosecutors said a ransomware gang fueled Russian government corruption, and allowed the gang’s leaders to avoid paying taxes and dodge the country’s military draft.