🔴 Water Attacks Spread to 7 States, 🔴 N-able RMM God-Mode Exploit, ⚠️ COLDCARD RNG $88M Theft, 🎯 Larva-24009 Phishing Campaign, 🛡️ Chrome Blocks New Tab Hijackers

The water-sector campaign that hit Minnesota is the day's defining story, now confirmed across at least seven states with Michigan and South Dakota acknowledging incidents and a TLP:Amber WaterISAC report aligning the activity with hacking campaigns the US has previously tied to Iran. The pattern matches the 2020 attacks on Israeli water facilities: cellular-connected equipment as the assumed vector and internet-exposed PLCs as the target. Every water and wastewater operator with cellular-connected OT should assume it is in scope. US Water Cyberattacks Extend Beyond Minnesota to at Least 7 States

The COLDCARD hardware-wallet RNG flaw explains the $88.6 million Bitcoin theft from 4,585 wallets in three automated sweeps. A faulty check in firmware makes the random number generator fall back to a deterministic algorithm seeded with observable device values, so attackers could reconstruct seeds offline and match derived addresses against the blockchain. Updating firmware does not repair an exposed seed; affected users must generate and migrate to a new one. COLDCARD Hardware Wallet RNG Flaw Likely Behind $88.6M Bitcoin Theft

The CrowdStrike threat-hunting report sets the new baseline: AI-driven detections now outnumber human-triggered ones by more than two to one, and AI-enabled malicious activity is up 89 percent year over year. Detection triage must treat agentic behavior as the norm, and agent identities need first-class inventory and least privilege.

Watchlist: cellular-modem audits and VPN-gated remote access at water utilities, COLDCARD seed migration for affected users, and agent-identity inventory as AI-driven noise becomes the baseline.