Cyber Threat Brief — Issue #017

A wave of intrusions has disrupted water and wastewater utilities across at least 12 US states between late July and August 2026, including more than 30 communities in Minnesota. Several utilities reverted to manual control to maintain operations, and one Georgia authority issued a boil-water notice. Federal officials have not formally attributed the campaign, but the operational pattern is consistent with CyberAv3ngers, an Iranian state-directed group tied to the IRGC Cyber-Electronic Command that has been active since at least 2020. The attacks target programmable logic controllers and human-machine interfaces, the industrial computers that automate water treatment, that were left reachable from the internet. In many cases the entry method involves default or unchanged passwords and exposed remote access software. The Minnesota attacks began just four days after CISA updated its advisory warning of active Iranian targeting of water sector control systems. The campaign is significant for two reasons. First, it targets physical infrastructure that communities depend on for safe drinking water. Second, the affected control equipment is often difficult or impossible to patch, which means the defensive burden falls entirely on network isolation, access control, and removing these systems from the public internet. Small and rural utilities are the primary targets precisely because they are the least likely to have dedicated security staff.

A critical remote code execution vulnerability in Gitea, the widely used self-hosted platform for managing source code, has moved from disclosure to active exploitation in under a month. Tracked as CVE-2026-60004 and rated a critical 9.8, the flaw lets an attacker with ordinary repository write access abuse the diffpatch API endpoint to plant an executable Git hook and run arbitrary shell commands as the Gitea service account. Gitea patched it in late July with version 1.27.1, and CISA added it to the Known Exploited Vulnerabilities catalog on August 25, confirming attacks are occurring in the wild, with a federal remediation deadline of August 28. The danger is amplified by a default Gitea setting: open registration. Although exploitation technically requires an authenticated account with repository write access, an exposed server that allows open registration lets an external attacker simply create an account, create a repository, and trigger the exploit. Confirmed attacks have deployed cryptocurrency mining malware, with at least one documented case where a self-hosted instance was compromised after an automated scanner registered an account on a server with no email confirmation or CAPTCHA. Shadowserver is tracking nearly 5,000 Gitea instances exposed online. A compromised code server can expose configuration secrets, database credentials, and the OAuth and integration credentials that connect it to production.

Adobe and Nvidia each published multiple security advisories this week, including fixes for critical vulnerabilities in their products. Nvidia's advisories are particularly relevant given how widely its GPU and AI infrastructure components are deployed across cloud providers, research institutions, and any organization running AI or high-performance computing workloads. A vulnerability in this layer can affect the shared infrastructure that many organizations depend on. Notably, a significant share of the vulnerabilities being disclosed by major vendors this year, including many in Google Chrome, were discovered using AI. This is reshaping the disclosure landscape in two ways at once. Vendors are finding and fixing more flaws faster than ever, which is good, but the same capability lowers the barrier for attackers to discover flaws too, and it is part of why the volume of patches organizations must apply keeps rising. The practical consequence for defenders is that the patch backlog is growing structurally, not temporarily, and prioritization discipline matters more than it ever has.