The latest roundup of cybersecurity incidents reveals a troubling landscape, where vulnerabilities in key infrastructure and technologies are being exploited. Among the most alarming reports this week includes coordinated cyberattacks targeting water utilities in at least 12 U.S. states, believed to be linked to Iranian hackers. This escalation highlights the extensive reach and evolving tactics of cybercriminals and state-sponsored actors alike.
Water and wastewater utilities across states such as Michigan, Georgia, and South Dakota have been responding to these cyberattacks, which target operational technology critical to their functions. Initially reported in Minnesota, these incidents have gained broader attention, leading the FBI to note operational disruptions in at least seven states by late July. Recent information indicates that the number has now risen to a total of twelve affected states. Officials stress the urgency of these threats, as Iranian hackers have historically focused on internet-connected programmable logic controllers (PLCs) used in these facilities.
An incident at Georgia’s Clayton County Water Authority serves as a notable example, where a cyberattack temporarily disrupted water service and prompted officials to issue a precautionary boil water advisory—though this was later lifted after confirming the water quality. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has raised alarms about similar incidents, urging water and wastewater systems to adopt stronger security measures. Particularly, CISA has pointed out that the attackers are capable of remotely accessing PLCs to alter passwords or disable monitoring capacities, leading to potential operational impacts like flooding or loss of water pressure.
In an alarming development, researchers have uncovered malware embedded within Chinese-made Small Office/Home Office (SOHO) routers manufactured by Shenzhen Zhibotong Electronics. This malware, referred to as “Endlessdoors,” enables remote access to networks, even those shielded behind firewalls. Such findings are expected to bolster efforts in the U.S. to ban foreign-made routers citing national security concerns. Disturbingly, these routers constitute a significant portion of the market despite prior warnings regarding their vulnerabilities.
In a related vein, a bipartisan report from the House Select Committee on the Chinese Communist Party highlights that several state-owned Chinese telecommunications firms continue to maintain a presence in U.S. internet infrastructure. Despite previous regulatory actions that denied or revoked their operating authority due to national security concerns, the companies reportedly still manage essential network services that could offer access to sensitive data. Lawmakers have urged that the Federal Communications Commission (FCC) be empowered to take stronger measures to protect U.S. networks against these ongoing threats.
The scope of cybercrime continues to evolve globally, with a recent Interpol report revealing that artificial intelligence (AI) is linked to over half of reported cybercrime incidents across Africa. Compounding an already challenging cybersecurity landscape, the Africa Cyberthreat Assessment Report 2026 indicates that AI is increasingly employed for malicious activities like phishing and ransomware, leading to significant financial losses estimated at nearly $484 million over the past year.
As cybercriminals exploit AI for sophisticated attacks, the continent grapples with a shortage of skilled cybersecurity professionals and digital forensics capabilities. Interpol has called for increased international collaboration and investment in cyber resilience to combat these emerging threats.
In the U.K., a breach of the Police National Legal Database has exposed the contact details of over 100,000 individuals, including police officers and government partners. The data breach, linked to the ExfilSquad hacking group, raises critical questions about the security of sensitive information held by law enforcement agencies. In light of this, authorities are investigating the precise means by which the attackers gained access to the vast data trove.
Compounding these security concerns, IBM has also issued a warning regarding a critical vulnerability in its Langflow AI platform, indicating that exploitation is actively occurring. This flaw — affecting various versions of the platform — allows unauthorized users to gain superuser access remotely, raising alarms about the implications for affected deployments.
Additionally, a cyberattack on logistics operations impacting the Dutch luxury department store chain De Bijenkorf has delayed orders and returns, while raising concerns about the exposure of customer data. In this instance, the retailer has confirmed that the attack targeted an external partner, thereby keeping its own systems intact for the time being.
Finally, developers are urged to be cautious against counterfeit tools on the Open VSX registry that are masquerading as legitimate extensions to harvest sensitive metadata from development environments. Such malicious activities underline the importance of vigilance in the increasingly complex digital ecosystem.
The confluence of these events underscores the ever-present and evolving nature of cyber threats in today’s interconnected world. Organizations and individuals alike must remain vigilant and proactive in fortifying their defenses against a sophisticated, resourceful adversary within the realm of cybercrime.