NEWSNATIONNOW (Josie Fischels) - Water supply cyberattacks: What we know
Michigan says nine of its water systems were hit by cyberattacks, joining Minnesota.
JUSTTHENEWS (Kevin Killough) - Not just Minnesota: Hackers targeted municipal water systems in 7 states, FBI says
The agencies, which didn't say in which states the municipalities are located, said that some of the malicious activity has impacted water operations in those municipalities that were struck.
CISA (CISA) - Russian State-Supported Cyber Actors Conduct Phishing Campaign Targeting Users of Zimbra Collaboration Suite
Russian State-Supported Cyber Actors Conduct Phishing Campaign Targeting Users of Zimbra Collaboration Suite Executive summary A group of Russian state-supported cyber actors has been targeting and compromising various Western government and commercial organizations using the Zimbra Collaboration Suite (ZCS) software since at least July 2025. The Russian state-supported advanced persistent threat (APT) group’s activity is tracked in the cybersecurity community under several names (see Cybersecurity industry tracking ), primarily as “LAUNDRY BEAR,” a name initially coined by the Netherlands General Intelligence and Security Service (AIVD) and Defence Intelligence and Security Service (MIVD) [1 ]. LAUNDRY BEAR’s targeting is…
NEWSNATIONNOW (Ali Bradley) - ATM 'jackpotting' funding Tren de Aragua activity: Feds
Malware installation into the ATM orders the machine to spit out cash without any evidence a transaction took place.
CISA (CISA) - Improve Router Hygiene to Protect Against Russian State-Sponsored Targeting
Russian Government-Sponsored Activity Targets Poorly Configured and Vulnerable Devices Across Critical Sectors Executive summary Russian Federal Security Service (FSB) Center 16 cyber actors continue to exploit poorly configured and vulnerable networking devices worldwide, opportunistically compromising multiple critical infrastructure sector networks. This joint Cybersecurity Advisory (CSA) builds on FBI’s Russian Government Cyber Actors Targeting Networking Devices, Critical Infrastructure Public Service Announcement of the decade-plus FSB Center 16 cyber activity by providing additional tactics, techniques, and procedures (TTPs) to enable defenders to more fully understand and counter the threat. [1 ] This CSA is being released…
AXIOS (Sam Sabin) - China's new open-source model accelerates AI hacking threat
GLM-5.2 — the latest Chinese open-source model capturing Silicon Valley's attention — is raising fresh concerns among security researchers that advanced AI hacking capabilities are becoming dramatically cheaper and more accessible. Why it matters: The barrier to entry for malicious hackers eager to automate and personalize their attacks is getting lower and lower. Driving the news: Z.ai's GLM-5.2, which was released last week, has agentic capabilities that rival those of Claude Opus 4.8 and OpenAI's GPT-5.5 while costing roughly half as much to run. - Two separate security evaluations from Graphistry and Semgrep found that GLM-5.2 performed on par with leading U.S. models on cybersecurity investigation and vulnerability-discovery…
NYTIMES (Cade Metz) - Scientists Find Way to Supercharge Dangerous Computer ‘Worms’ With A.I.
Researchers at the University of Toronto showed how hackers could use artificial intelligence to create a program that could target any known flaw in the world’s computers.
YOUTUBE (NewsNation) - Are phishing scams now considered old school?
Douglas Rushkoff, author and documentarian, says AI products are more advanced than the old-school phishing scams.
NYTIMES (Timothy D. Haugh) - I Ran the N.S.A. This Is How to Defeat China’s Hacker Army.
Beijing has hacked America, but we have all the tools we need to fight back.
AXIOS (Sam Sabin) - OpenAI makes its rival to Anthropic's Mythos more widely available to cyber defenders
OpenAI is rolling out a more permissible version of GPT-5.5 — aka "Spud" — to vetted cyber defenders, the company said Thursday. Why it matters: Recent security testing suggests that GPT-5.5 model is nearly as good at finding and exploiting software bugs as Anthropic's Mythos Preview . The capabilities of the new models have sparked an urgent debate in Silicon Valley and the White House about how to keep them out of the hands of bad actors. Driving the news: OpenAI is opening a limited preview of GPT-5.5-Cyber to vetted cyber defenders who are "responsible for securing critical infrastructure," per a press release. - A source familiar with GPT-5.5-Cyber's abilities told Axios that they were roughly on par with Mythos. One major…