California city reports ransomware attack as LA transit agency finds ‘unauthorized activity’

Multiple security and law-enforcement developments: Foster City reported a ransomware attack that may have exposed public information and urged residents and vendors to change passwords; LA Metro reported unspecified “unauthorized activity.” The FBI executed seizures against leak sites tied to Iran’s Ministry of Intelligence and Security (MOIS), operating under names including “Handala.” The U.S. DOJ also seized infrastructure and domains associated with several large botnets (Aisuru, KimWolf, JackSkid, Mossad) used for impactful DDoS campaigns. Separately, an individual pleaded guilty to an $