Cal Water Investigating Iranian Hackers’ Claims

SecurityWeek

June 16, 2026 at 11:53 AM

Overview

California Water Service is currently investigating claims made by Iranian hackers regarding potential breaches of its water and wastewater systems. However, the company has stated that there is no evidence of any operational disruptions at this time. This situation raises concerns about the security of critical infrastructure, especially as cyber threats to public utilities continue to grow. Authorities and customers alike are watching closely to see if these claims lead to any actual security incidents that could impact water supply or safety. The investigation is ongoing, and Cal Water is taking the matter seriously to ensure the integrity of their systems.

Key Takeaways

Affected Systems: Water and wastewater systems operated by California Water Service
Timeline: Ongoing since October 2023

Original Article Summary

California Water Service says there is no indication of operational disruptions to its water and wastewater systems. The post Cal Water Investigating Iranian Hackers’ Claims appeared first on SecurityWeek.

Impact

Water and wastewater systems operated by California Water Service

Exploitation Status

The exploitation status is currently unknown. Monitor vendor advisories and security bulletins for updates.

Timeline

Ongoing since October 2023

Remediation

Not specified

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Related Topics: This incident relates to Critical.

Read Original Article

Related Coverage

Fifteen JetBrains Marketplace Plugins Found Stealing API Keys

Infosecurity Magazine

Aikido Security has found that at least 15 plugins available on the JetBrains Marketplace are stealing API keys from users. These malicious plugins disguise themselves as legitimate tools for integrated development environments (IDEs) but are designed to extract sensitive information. This situation affects developers who rely on these plugins for their work, potentially exposing their projects and personal data. The discovery raises concerns about the security of third-party plugins and the need for vigilance among users when downloading software. Developers should review their installed plugins and consider removing any that might be suspicious.

Jun 17, 2026

Oracle’s Second Monthly Security Updates Deliver 245 Patches

SecurityWeek

Oracle has rolled out its June 2026 Critical Security Patch Update, addressing a total of 245 vulnerabilities across various products, including Communications, E-Business Suite (EBS), and Enterprise Manager. This update is crucial as it aims to protect users from potential exploitation of these vulnerabilities, which could lead to unauthorized access or data breaches. The large number of patches indicates a significant risk across multiple platforms, making it essential for organizations using these products to apply the updates promptly. By doing so, they can safeguard their systems against possible attacks that may target these weaknesses. Users are encouraged to review the specific patches applicable to their environments and implement them as soon as possible to enhance their security posture.

Jun 17, 2026

Malicious apps got into the Arch User Repository - how to protect yourself

144 Mastra npm Packages Compromised via Hijacked Contributor Account

The Hacker News

Researchers have uncovered a software supply chain attack affecting 144 npm packages linked to the Mastra namespace, which is used for building AI applications. The attack, identified by JFrog, SafeDep, Socket, and StepSecurity, involved the hijacking of a single npm account belonging to a user named 'ehindero', who then published malicious versions of these packages. This incident raises significant concerns for developers who rely on the Mastra framework, as it could lead to the introduction of vulnerabilities in their applications. Users of these compromised packages are urged to check their dependencies and update to secure versions to avoid potential risks. This event serves as a reminder of the importance of securing contributor accounts in open-source ecosystems.

Jun 17, 2026

Joomla, LiteSpeed Vulnerabilities Exploited in Attacks

SecurityWeek

Recent vulnerabilities found in Joomla and LiteSpeed have been exploited by attackers to execute arbitrary PHP code on shared hosting servers. This means that intruders can potentially gain root access, which allows them to take complete control of affected systems. Websites running Joomla or using LiteSpeed as their web server are particularly at risk. This situation highlights the pressing need for website administrators to ensure their systems are up-to-date and to implement necessary security measures. Failure to address these vulnerabilities could lead to significant data breaches and service disruptions for users.

Jun 17, 2026

Security Community Slams US Ban on Exporting Mythos, Fable

darkreading

A group of security experts has expressed strong opposition to the U.S. government's recent ban on exporting Anthropic's AI models, specifically Claude Fable 5 and Mythos 5. In an open letter, the experts argue that these export restrictions hinder progress in the field of artificial intelligence and could have negative implications for research and development. They believe that limiting access to these advanced models could stifle innovation and collaboration among researchers. This situation raises concerns about the balance between national security and the advancement of technology, as the ban could impact various sectors that rely on AI advancements. The experts are urging the government to reconsider these restrictions to foster a more open and collaborative environment in AI research.

Jun 16, 2026