Critical infrastructure

Week of Nov 91

• Nov 9AttacksFrance attributes the October sabotage of refrigeration at about 700 French grocery stores to an IRGC cyber unit, Shahid Kaveh, and Paris prosecutors request international arrest warrants

Week of Nov 24

• Nov 5DefenseCISA, the FBI, HHS, USDA and the Transportation Department urge operators to take refrigeration and cold-chain controllers off the internet (via Help Net Security)
• Nov 4AttacksAcronis says one operator in Taiwan ran a mesh of 12 AI agents against hundreds of organisations, reaching Taipei emergency-service records
• Nov 4AttacksAttacks on refrigeration controllers spread to at least 11 European countries and reach France's national blood service
• Nov 3PolicyThe UK NCSC judges AI-powered malware highly likely to be used in a ransomware attack on UK critical infrastructure by 2028, as the government funds a Cyber Shield and a vulnerability centre

Week of Oct 261

• Oct 28AttacksLumen says Volt Typhoon reached enterprise network control planes through a rotating relay network it calls Silent Train

Week of Oct 121

• Oct 13DefenseATT&CK v20 splits prompt injection into two techniques and adds a campaign for an AI-assisted breach that reached a municipal water utility

Week of Oct 54

• Oct 11CapabilityBooz Allen says frontier models met the objective in all eight of its operational-technology attack tests, reaching the control network in just over 16 minutes
• Oct 11AttacksAttackers drove supermarket refrigeration controllers to 50°C across France, and CERT-FR told operators to take the Danfoss series off the internet
• Oct 9DefenseThe Justice Department and the FBI seize seven domains running the scanning and spear-phishing tools a Chinese contractor sold, a day after the advisory naming it
• Oct 8DefenseAnthropic puts engineers behind eleven critical-infrastructure partners and starts sending open-source maintainers vulnerability reports no human has read

Week of Sep 213

• Sep 24DefenseGoogle and Wiz launch Scan for Good, running AI vulnerability scans for public services and critical infrastructure with a human validating every finding
• Sep 23DefenseCISA and the FBI say a compromised US automation firm handed actors customers' SCADA data
• Sep 22DefenseNearly one in five US water organisations has identity data actively exposed by infostealers

Week of Sep 141

• Sep 18AttacksColorado says foreign actors changed pumping settings at two small water utilities

Week of Aug 311

• Aug 31DefenseThe National Cyber Director's office and Texas launch a six-month cyber pilot for water utilities

Week of Aug 172

• Aug 19AttacksUS agencies warn attackers are using AI-generated scripts to target Siemens S7 industrial controllers
• Aug 18AttacksCSIS puts the Iranian campaign against US water systems at about 100 facilities and locates 55 of them

Week of Jul 271

• Jul 30AttacksFBI and EPA alert on actors targeting internet-facing water-sector PLCs across at least seven states

Week of Jul 201

• Jul 22AttacksUS advisory: Iran-linked actors manipulating Rockwell, Siemens and Schneider PLCs