Topic
Protecting power grids, water, transportation and industrial control/OT systems from cyberattacks and physical threats to essential services.
Australian Signals Directorate has launched ASD Essentials, a principles-based framework that evolves the Essential Eight for IT, OT and cloud. Compliance obligations stay unchanged for now, The Cyber Express reported.
Reality
CenterPoint Energy told the Texas Attorney General that a breach compromised Social Security and driver's license numbers of 1,062,060 Texans. A forum actor claimed 7.49 million records; the all-state total is unclear.
Reality
DOJ and FBI seized seven domains tied to Integrity Tech's Microscan and FishHub tools, the second action against the Flax Typhoon contractor. The company still had live scanning and phishing infrastructure to seize after the September 2024 botnet takedown.
Reality
Booz Allen's frontier AI models met all eight attack objectives against an isolated industrial-control testbed in its Chantilly, Virginia lab. In the last test a model took administrative control of a robotic arm and moved it.
Reality
FBI and Justice Department investigators seized seven domains that China-linked Flax Typhoon used to scan and in some cases infiltrate critical infrastructure. The risk remains, and with no patch to install, exposed operators have to hunt the group's tradecraft themselves.
Reality
Anthropic announced a Critical Infrastructure Defense Program that pairs Claude with outside security firms, CrowdStrike among them. Alongside it, Anthropic is running a free, opt-in scanning service for open-source maintainers directly, CyberScoop reported.
Perspective Coverage
9 publishersReality
A fast SOC cut off the intrusion in minutes. The red team still reached the domain controller and the control network, because every control that failed afterwards was a permission somebody granted and nobody had reviewed.
Perspective Coverage
3 publishersReality
Anthropic's Cyber Mission puts Claude models, engineers and funding behind bug fixing, after Glasswing finds often waited months for a patch. Its free OSS Scanner sends unreviewed reports that Anthropic expects to be over 90% accurate, so it suits maintainers who have time to verify them.
Reality
Researchers in Nature Food urge a national cybersecurity consortium of land-grant universities for US agriculture, after workshops with over 150 stakeholders. The case rests on testimony, and the farm testbeds they propose would be where that exposure gets measured.
Reality
Palo Alto Networks found 49 percent of critical infrastructure operators who see every OT asset still list legacy equipment as a challenge. Most respondents say their security tools, seven on average at large operators, have raised complexity and cost.
Reality
Anthropic will let verified organisations run "high risk offensive testing" with Claude Mythos 5.1 and its other top models, alongside the US government. Access goes to a select group, so whoever draws up the vetting list now decides which defenders can use the company's strongest cyber model.
Reality
Palo Alto's Unit 42 says an Iranian state-aligned actor it tracks as CL-STA-1178 posed as the Dubai Airports IT department to deliver trojanized coding challenges to high-value targets. Its report ties attacks other vendors reported one at a time into one campaign that hit Iraqi critical infrastructure in March 2026.
Reality
Japan's government will build and test methods to find attackers already inside power and telecom networks, with costs in fiscal 2027 budget requests. For operators, the job extends past answering alerts to searching for intruders who never set one off.
Reality
Warlock, the group Microsoft tracks as Storm-2603, hit four organizations in Spanish- or Portuguese-speaking countries in two months, Symantec says. It works like the Chinese state groups it first appeared beside and extorts like a ransomware crew.
Perspective Coverage
6 publishersReality
Symantec says Warlock operators ran an AV/EDR killer across at least 40 machines in roughly two hours after a suspected SharePoint compromise. The ransomware payloads moved between domain controllers through SYSVOL replication.
Reality
China-linked Warlock operators hit at least four organisations through SharePoint flaws in two months, Symantec says. Its report lists six 2026 SharePoint CVEs only as possible additions, and the entry it documents is still older flaws on servers never patched or mitigated.
Reality
CISA's red team breached two critical-sector organisations, and only the water-sector one contained it, isolating machines in up to 20 minutes. The gap traces to alert tuning and triage, so the first fix most SOCs need is analyst time.
Reality
Keio Corporation shut its network after ransomware hit its group servers on September 26, disrupting payments and the business behind its 25 hotels. Its trains appear unaffected. Investigators have not yet traced the attack path, so it is still unknown whether a designed boundary kept rail out of reach.
Reality
Operation Economic Outcast names nearly 60 targets, but the durable change is the standing authority to designate foreign firms in crypto, technology, gold, aviation and shipping.
Perspective Coverage
6 publishersReality
Detection at the first hop forced CISA's red team onto donated access at Organization B. It did not stop the team reaching the same sensitive systems it reached at Organization A.
Perspective Coverage
5 publishersReality
Security · August 26, 2026 · Confirmed2 publishers
Product · August 27, 2026 · Confirmed5 publishers
Leadership · August 27, 2026 · Confirmed4 publishers
Build · August 28, 2026 · Confirmed3 publishers
Security · August 27, 2026 · Confirmed5 publishers
Product · September 4, 2026 · Confirmed2 publishers
Security · September 5, 2026 · Confirmed2 publishers
Security · September 10, 2026 · Confirmed2 publishers
Security · September 16, 2026 · Confirmed5 publishers
Security · September 17, 2026 · Confirmed3 publishers
Invest · August 30, 2026 · Confirmed8 publishers
Invest · September 4, 2026 · Confirmed3 publishers
Security · September 10, 2026 · Confirmed2 publishers
Product · August 17, 2026 · Confirmed3 publishers