Cybersecurity News
Filters
Filtered by tag: iran × Clear
CISA says over 100 US water systems were targeted in July 2026 alone
CISA has warned of a significant rise in cyberattacks targeting US water systems, with over 100 internet-exposed programmable logic controllers attacked in July 2026 alone. The attacks caused password lockouts, IP changes, boil water notices, and forced manual operations across facilities in at least 12 states. Attribution remains unconfirmed, though an Iranian state-sponsored group is suspected. CISA urges operators to remove PLCs from public internet access immediately.
Iran-Linked Hackers Expand Attacks With New Backdoor and Reverse SSH Tunnels
Matched: Australia
Iran-linked group Tortoiseshell has expanded espionage operations using a Windows backdoor and reverse SSH tunnelling tool. Both components masquerade as wtsapi32.dll and use DLL hijacking. The backdoor runs commands, transfers files and beacons via HTTPS; the tunnel routes attacker traffic through port 443 into victim networks. Group-IB identified additional infrastructure with country-themed subdomains suggesting targets across the Middle East and Europe.
Wake-Up Call for CNI After Iranian Attack Shuts Down UK Power Plant
An Iranian cyberattack that temporarily shut down a UK power plant has prompted warnings from security experts about vulnerabilities in critical national infrastructure. Analysts say the incident exposes inadequate defenses across key sectors and are calling for urgent investment in cybersecurity measures, improved threat intelligence sharing, and stronger regulatory frameworks to protect essential services from increasingly sophisticated state-sponsored attacks.
Bluesky reveals recent outage was caused by major DDoS attack
Bluesky experienced a significant outage caused by a distributed denial-of-service (DDoS) attack, the company confirmed. The attack overwhelmed its systems, disrupting access for users. Iranian state-backed threat actors claimed responsibility, though Bluesky has not verified that claim. The platform has since restored service and is working to strengthen its defenses against future attacks.
US charges 17 Iranian nationals over “massive cyber theft campaign”
Matched: Australia
The US Justice Department has charged 17 Iranians linked to a company called Emennet Pasargad over a large-scale cyber theft campaign targeting academics worldwide, including in Australia. The hackers allegedly stole research, credentials, and other sensitive data. Several of those charged are also accused of previous interference in US elections.