‘CanisterWorm’ Springs Wiper Attack Targeting Iran

This collection of KrebsOnSecurity items highlights multiple active, high-impact threats and shifting attacker tradecraft across 2026: a financially motivated group deployed “CanisterWorm,” a cloud‑spreading worm that wipes systems configured for Iran time zone or Farsi; Iran‑linked actors claim a destructive wiper attack against medical device vendor Stryker; and prolific IoT botnets (Aisuru, Kimwolf, JackSkid and Mossad) that enslaved millions of devices have been targeted in a multinational disruption effort. Kimwolf remains a high‑profile threat—used for record DDoS, doxxing, swatting and,