Curated Cyber Threat Intelligence

Threat Feed

Daily intelligence on vulnerabilities, threat actors and geopolitical context — distilled from primary sources.

scheduleUpdated 2026-10-28 · 04:17 UTC
articleTotal: 1890 reports

Filtered Reports

4 / 4 results
Active filter:tag: #water-utilities✕ clear
Warlock: China-Linked Ransomware Group Targets Critical Infrastructurehighperson_alertThreat Actor
person_alertThreat Actor

Warlock: China-Linked Ransomware Group Targets Critical Infrastructure

Warlock is a China-linked ransomware group that has demonstrated a focus on critical infrastructure and public sector targets. The actor's motivation appears to align with both financial gain through ransomware operations and potential strategic inte…

Microsoft2 Oct · 16:33 UTC
Weekly roundup: 296K IoT botnet, water system attacks, SharePoint RCEhighbug_reportVulnerability
bug_reportVulnerability

Weekly roundup: 296K IoT botnet, water system attacks, SharePoint RCE

Multiple products and sectors: 296,000 IoT devices compromised by Dysphoria botnet; 100+ water systems targeted (details not provided in excerpt); SharePoint RCE vulnerability chain (CVE/version unspecified); Android banking apps targeted by Octagon…

The Hacker News27 Aug · 13:12 UTC
4,407 Rockwell PLCs exposed online; 22 in cities hit by water attackshighbug_reportVulnerability
bug_reportVulnerability

4,407 Rockwell PLCs exposed online; 22 in cities hit by water attacks

Rockwell Automation programmable logic controllers (PLCs) globally: 4,407 exposed devices (2,844 in US). Primary models: MicroLogix 1400 (50%) and MicroLogix 1100 (8%).

Rockwell Automation6 Aug · 10:16 UTC
Coordinated OT attack disrupts 30+ Minnesota water systemshighbug_reportVulnerability
bug_reportVulnerability

Coordinated OT attack disrupts 30+ Minnesota water systems

Over 30 community water systems in Minnesota. Operational technology (OT) systems at local water utilities targeted, including programmable logic controllers and computerized operating systems. Attacks occurred July 26-27, 2026. Threat actor unknown.

BleepingComputer29 Jul · 12:55 UTC