Latest cybersecurity reporting from selected sources.

Nation-state attackers breach water systems through weak passwords, exposed PLCs, and poor segmentation — not sophisticated malware.

The long-active Iranian threat group debuted various attack strains and payloads in attacks against organizations in the Middle East and Africa.

Security researchers say multiple threat groups, including Iran's Charming Kitten APT offshoot Subtle Snail, are deploying malware with code-signing certificates from the Houston-based company.

"Nimbus Manticore" is back at it, this time with improved variants of its flagship malware and targets that are outside its usual focus area.

The group seeks out aerospace professionals by impersonating job recruiters — a demographic it has targeted in the past as well — then deploys the SlugResin backdoor malware.

Report says US and Israel spent $1 billion to develop the infamous Stuxnet virus, built to sabotage Iran's nuclear program in 2008.

Seedworm, aka MuddyWater, drops PowerShell-based malware on victims using living-off-the-land techniques.

The government-backed APT's new malware framework represents a step up in Iran's cyber sophistication.

The Menorah malware can upload and download files, as well as execute shell commands.

Iran-linked APT35 group crafted specific Mac malware when targeting a member of the media with new tools to add backdoors.

The dropper is being used in a Charming Kitten APT campaign that has hit organizations in multiple countries.

The custom malware used by the state-backed Iranian threat group Drokbk has so far flown under the radar by using GitHub as a "dead-drop resolver" to more easily evade detection.

The supply chain attack is piggybacking off an earlier breach to deploy new wiper malware.

New Android malware variant is part of long-running Domestic Kitten campaign being conducted by APT C-50 Group, analysts report.