CISA Urges Utilities to Remove Internet-Exposed PLCs After Minnesota Attacks

Security news roundup covering attacks against internet-exposed operational technology at Minnesota water utilities, Russian SVR-linked credential theft through hijacked hotel Wi-Fi portals, a critical Adobe Campaign Classic remote code execution vulnerability, state-backed watering-hole activity in South Korea, AI-assisted vulnerability discovery, insecure AI evaluation environments, SilverFox ValleyRAT targeting of a Japanese manufacturer, the Flying Eagle Android RAT ecosystem, and brand impersonation campaigns delivering malware.