Iran‑Backed Threat Actors Hit US CNI Providers via Internet‑Facing OT Assets

Infosecurity Magazine roundup: Multiple high-impact campaigns and active exploits were reported — Iran-backed threat actors targeted US critical national infrastructure via internet-facing OT assets causing disruption and loss; APT28 hijacked routers/modified VPSs to run malicious DNS servers and steal credentials; and a GPU Rowhammer technique (GPUBreach) enables full system privilege escalation. Researchers disclosed several malware-as-a-service and supply‑chain threats (Venom Stealer, Phantom, DeepLoad, TeamPCP) and novel covert channels (GitHub C2, EtherRAT smart‑contract C2). Vendors and,