Hackers Strike Minnesota Water Utilities, One Plant Briefly Offline

Security Affairs reports multiple significant cybersecurity incidents and vulnerabilities, including coordinated attacks disrupting Minnesota water-utility OT systems, a ShinyHunters-claimed EY data breach, critical VMware ESXi and JetBrains TeamCity flaws enabling host or server code execution, an AI-assisted supply-chain and cloud compromise, a major VPN data exposure, the 200,000-device Dysphoria botnet using blockchain-based C2, malware campaigns supported by the Cruciferra crypter service, and CISA additions of actively exploited Arista VeloCloud and Fortinet FortiOS vulnerabilities.