California city reports ransomware attack as LA transit agency finds ‘unauthorized activity’

Aggregated security news (Therecord, 20 Mar 2026): Foster City reported a ransomware attack that may have exposed public information and urged affected parties to change passwords; LA Metro reported unspecified “unauthorized activity”; the FBI seized leak sites tied to Iran’s Ministry of Intelligence and Security (operating under names including “Handala”); the DOJ seized infrastructure for multiple botnets (Aisuru, KimWolf, JackSkid, Mossad) used in large DDoS campaigns; Rep. Darin LaHood discussed the political effort needed to reauthorize Section 702; and a defendant pleaded guilty to an $8