Iranian attacks on US critical infrastructure puts 3,900 devices in crosshairs

A series of CyberScoop reports highlight escalating nation-state and crimeware activity and emerging AI-security issues. Censys and U.S. agencies warn an Iran-linked campaign is actively targeting U.S. energy, water and government OT/ICS devices (≈3,900 exposed) with disruptive attacks; separate federal actions disrupted a Russia-linked (GRU/APT28/Forest Blizzard) router-based espionage campaign affecting ~18,000 devices. Researchers also disclosed ‘GrafanaGhost’ prompt-injection data-exfiltration against Grafana’s AI features, while tech firms launched Project Glasswing to find critical open‑