(TLP:CLEAR) Supplemental Cyber Highlights – June 26, 2025

The following posts are useful for general awareness of current cyber threats, vulnerabilities, guidance, and other cyber-related news or updates. These resources have been curated by the WaterISAC analyst team as items of broad relevance and benefit that do not need supplemental analysis at this time.

Critical Infrastructure Resilience

• Securing Our Water: Understanding the Water Cybersecurity Enhancement Act of 2025 | Tripwire
• Virtual Routes highlights Europe’s water systems under siege from cyber attacks, provides policy recommendations | Industrial Cyber
• Claroty Team82’s State of CPS Security 2025 Report: Building Management System Exposures | Claroty
• Siemens Notifies Customers of Microsoft Defender Antivirus Issue | SecurityWeek
• The illusion of control: Can we ever fully secure autonomous industrial systems? | Check Point
• NIST flags rising cybersecurity challenges as IT and OT systems increasingly converge through IoT integration | Industrial Cyber

Iran-Israel Conflict:

• Possible Cascading Security Impacts of US Strikes on Strategic Iranian Nuclear Targets | Health-ISAC
• Threat Brief: Escalation of Cyber Risk Related to Iran | Unit 42
• The Retaliation Window | Recorded Future News
• Iranian APT35 Hackers Targeting Israeli Tech Experts with AI-Powered Phishing Attacks | The Hacker News
• Iranian cyber threats overhyped, but CISOs can’t afford to let down their guard | CSO Online
• CISO Action Plan: Responding to Geopolitical Tensions in Iran | Dragos
• Defending against the Iranian Cyber Threat to Critical Infrastructure | Keystrike

IT Vulnerability Security Updates

• Critical Cisco ISE Vulnerabilities Allow Remote Code Execution | SecurityWeek
• SonicWall NetExtender Trojan and ConnectWise Exploits Used in Remote Access Attacks | The Hacker News
• Flaw in Notepad++ installer could grant attackers SYSTEM access (CVE-2025-49144) | Help Net Security
• New Vulnerabilities Expose Millions of Brother Printers to Hacking | SecurityWeek

IT Malware, Threats & Risks

• The Hidden Risks of SaaS: Why Built-In Protections Aren’t Enough for Modern Data Resilience | The Hacker News
• ClickFix attacks skyrocketing more than 500% | Help Net Security

Cyber Resilience, General Awareness, & AI

• Stronger Together: The Power of Information Sharing | Gate 15
• Companies negotiate their way to lower ransom payments | Help Net Security
• Breaking the cycle of attack playbook reuse | Help Net Security
• Short-term extension of expiring cyber information-sharing law could be on the table | CyberScoop
• AI Evasion: The Next Frontier of Malware Techniques | Check Point
• What ‘OpenAI for Government’ means for US AI policy | ZDNET