Iranian Hackers Claim California Water Utility Breach; FBI Dismantles $1.9B China-Based Phishing Network; CISA Orders Emergency Ivanti Patch

Executive Summary

This week's intelligence cycle reveals significant threat activity across multiple critical infrastructure sectors, with water systems, healthcare, and energy emerging as primary targets. The most pressing developments include:

• Water Sector Alert: Iranian cyber group Handala claims responsibility for breaching California Water Service (Cal Water), publishing 5GB of data including customer PII and credentials for the RTKBase platform. Security experts are actively assessing the validity and scope of these claims.
• Major Law Enforcement Actions: The FBI dismantled a massive China-based cybercrime network responsible for $1.9 billion in losses through smishing campaigns. Separately, Europol disrupted the AudiA6 cryptocurrency laundering platform used extensively by ransomware operators.
• Active Exploitation: CISA issued a Binding Operational Directive requiring federal agencies to patch an actively exploited Ivanti Sentry vulnerability (CVE allowing root-level code execution) by Sunday, June 14. Honeypot data confirms ongoing exploitation attempts.
• Zero-Day Extortion Campaign: ShinyHunters is actively exploiting an unpatched Oracle PeopleSoft zero-day (CVE-2026-35273) to extort universities, with Google confirming in-the-wild exploitation while Oracle has yet to release a patch.
• Supply Chain Compromise: Over 400 packages in the Arch Linux User Repository (AUR) were hijacked to deploy an eBPF rootkit and credential-stealing malware, highlighting persistent software supply chain risks.
• Government Communications Breach: France's Tchap encrypted messaging platform suffered a breach affecting over 73,000 government employees, raising concerns about secure communications infrastructure.

Threat Landscape

Nation-State Threat Actor Activities

• Iran - Handala Group: The Iranian-linked hacktivist group claims to have compromised Cal Water, one of California's largest water utilities. The group published 5GB of allegedly stolen data and claims capability to disrupt U.S. water supply operations. Security experts are divided on the validity of these claims, with some noting the data appears authentic while others question the group's actual operational capabilities against SCADA systems.
• China - Velvet Ant: Sygnia researchers disclosed that a China-nexus threat group has maintained persistent access to Linux systems for nearly a decade by backdooring the Linux login software itself. This sophisticated technique allowed the group to evade traditional endpoint detection by hiding within authentication mechanisms that defenders rarely scrutinize. Full technical analysis available.
• China - Outsider Network: The FBI successfully dismantled a massive China-based cybercrime network known as "Outsider" that caused approximately $1.9 billion in losses. The network provided phishing kits and infrastructure for smishing campaigns using lures about missed packages, unpaid tolls, and parking violations. The takedown represents one of the largest disruptions of a phishing-as-a-service operation to date.

Ransomware and Cybercriminal Developments

• Conti Prosecution: Oleksii Lytvynenko, a 44-year-old Ukrainian national, pleaded guilty to conspiracy charges related to his role in the Conti ransomware operation. He faces up to 20 years in prison. Lytvynenko joined Conti in 2021 and continued cybercriminal activity until his arrest in Ireland in 2023. This prosecution signals continued international cooperation in pursuing ransomware operators.
• AudiA6 Laundering Platform Disrupted: Europol and the FBI jointly seized the domain of AudiA6, a dark web cryptocurrency laundering service extensively used by ransomware gangs. Multiple suspects were arrested. The platform facilitated the conversion of cryptocurrency ransoms into clean funds, representing critical financial infrastructure for the ransomware ecosystem. Operation details here.
• ShinyHunters Extortion Campaign: The notorious data theft group is actively exploiting an unpatched Oracle PeopleSoft zero-day (CVE-2026-35273) to target universities. Google has confirmed in-the-wild exploitation, though Oracle has only mitigated the vulnerability in its cloud environments without releasing a patch for on-premises installations. Universities using PeopleSoft should implement immediate compensating controls.
• Sniper Dz PhaaS Takedown: INTERPOL's Operation Ramz resulted in the disruption of Sniper Dz, a phishing-as-a-service platform that operated for over a decade. The platform's administrator was arrested. Group-IB provided intelligence supporting the operation.

Emerging Attack Vectors

• AI Agent Exploitation - Agentjacking: Security researchers have identified a new attack class called "Agentjacking" that tricks AI coding agents into executing malicious code on developer machines. As organizations increasingly deploy AI coding assistants, this attack vector poses significant risk to software development environments. Technical details available.
• LangGraph Vulnerability Chain: Critical security flaws in LangGraph, a popular framework for building AI agents, could enable remote code execution against self-hosted AI systems. Organizations deploying AI agents should verify they are running patched versions. Patches have been released.
• Prompt Injection Risks: A new study warns that prompt injection attacks remain highly effective against current AI agents, with researchers demonstrating consistent ability to manipulate AI systems into performing unintended actions. This has implications for any organization deploying AI in security-sensitive contexts.
• Harvest Now, Decipher Later: Security experts are raising alarms about quantum computing threats, noting that adversaries are likely collecting encrypted data now with plans to decrypt it once quantum computers become capable. Organizations handling long-lived sensitive data should begin planning post-quantum cryptography transitions.

Sector-Specific Analysis

Water & Wastewater Systems

ELEVATED THREAT LEVEL

The water sector faces heightened threat activity this week following Handala's claimed breach of California Water Service:

• Cal Water Incident: Iranian group Handala claims to have exfiltrated 5GB of data from Cal Water, including customer personal information and credentials for the RTKBase platform (used for precision GPS positioning in infrastructure management). The group has made threatening statements about capability to disrupt water supply.
• Expert Assessment: Security experts are divided on the threat's severity. While the data leak appears genuine, questions remain about whether Handala has actual access to operational technology systems or merely IT/business systems. The RTKBase credentials, if valid, could potentially be used to manipulate positioning data for infrastructure equipment.
• Recommended Actions:
  • Water utilities should immediately audit third-party platform credentials and implement rotation
  • Review network segmentation between IT and OT environments
  • Increase monitoring for anomalous access to SCADA and control systems
  • Verify incident response plans are current and tested

Energy Sector

NOTABLE INCIDENT

• Kyushu Electric Power Data Loss: Japanese energy company Kyushu Electric Power disclosed a physical security incident affecting private data of more than 10.9 million customers. A storage drive containing customer information was lost. This incident highlights the importance of physical security controls and data-at-rest encryption for portable media in critical infrastructure environments.
• Implications for U.S. Utilities: Energy sector organizations should review policies regarding portable storage devices, ensure encryption requirements are enforced, and verify chain-of-custody procedures for media containing customer data.

Healthcare & Public Health

ACTIVE THREATS

• Novo Nordisk Clinical Trials Breach: Danish pharmaceutical giant Novo Nordisk, the world's largest insulin producer, disclosed a data breach affecting patient information from clinical trials. The scope and attack vector are still being assessed, but the incident raises concerns about the security of clinical research data and potential impacts on drug development programs.
• Oracle PeopleSoft Exposure: Healthcare organizations using Oracle PeopleSoft for HR, finance, or student information systems (particularly academic medical centers) should be aware of the actively exploited zero-day being used by ShinyHunters. Implement network-level controls to restrict PeopleSoft access while awaiting a patch.

Communications & Information Technology

MULTIPLE ACTIVE THREATS

• French Government Tchap Breach: France's secure government messaging platform Tchap was breached, affecting over 73,000 public sector employees. The incident raises questions about the security of government-operated secure communications platforms and may prompt reviews of similar systems in other nations.
• Ivanti Sentry Active Exploitation: CISA has added an Ivanti Sentry OS command injection vulnerability to its Known Exploited Vulnerabilities catalog, requiring federal agencies to patch by June 14. Honeypot data confirms active exploitation attempts. The vulnerability allows attackers to execute arbitrary code with root privileges.
• Chrome 149 Security Update: Google released Chrome 149, patching 28 vulnerabilities including critical and high-severity flaws. A dozen use-after-free bugs were addressed. Organizations should prioritize browser updates.
• phpBB Authentication Bypass: A 10-year-old authentication bypass vulnerability was discovered in phpBB forum software, allowing attackers to log in as any user including administrators. Organizations running phpBB should update immediately.

Financial Services

• Smishing Infrastructure Disruption: The FBI's takedown of the Outsider network removes significant phishing infrastructure that targeted financial services customers with fake toll, package, and payment notifications. Financial institutions should continue customer education efforts and monitor for successor operations.
• Crypto Laundering Disruption: The AudiA6 takedown impacts ransomware operators' ability to launder cryptocurrency, potentially disrupting payment flows. However, alternative laundering services will likely emerge to fill the gap.

Transportation Systems

• Bridge and Tunnel Security Focus: Security Magazine highlights the unique challenges of securing bridges and tunnels, emphasizing that protection extends beyond physical assets to ensuring continuity of daily transportation operations. Organizations responsible for critical crossings should review both physical and cyber security postures.

Education Sector

ACTIVE TARGETING

• ShinyHunters University Campaign: Universities are being actively targeted and extorted by ShinyHunters exploiting the Oracle PeopleSoft zero-day. Institutions using PeopleSoft should:
  • Implement web application firewall rules to detect exploitation attempts
  • Restrict external access to PeopleSoft systems where possible
  • Increase monitoring for data exfiltration indicators
  • Prepare incident response and breach notification procedures

Vulnerability & Mitigation Updates

Critical Vulnerabilities Requiring Immediate Attention

CVE/Vulnerability	Product	Severity	Status	Action Required
CVE-2026-XXXXX (Ivanti Sentry)	Ivanti Sentry	Critical	Actively Exploited	Patch by June 14 (CISA BOD)
CVE-2026-35273	Oracle PeopleSoft	Critical	Zero-Day, Unpatched	Implement compensating controls
Chrome 149 (28 CVEs)	Google Chrome	Critical/High	Patched	Update immediately
phpBB Auth Bypass	phpBB Forum	Critical	Patched	Update immediately
LangGraph RCE Chain	LangGraph AI Framework	Critical	Patched	Update self-hosted instances

CISA Advisories and Directives

• Binding Operational Directive - Ivanti Sentry: CISA issued a BOD requiring federal agencies to patch the actively exploited Ivanti Sentry vulnerability by Sunday, June 14, 2026. Private sector organizations should treat this as equally urgent given confirmed exploitation.

Supply Chain Security Alerts

• Arch Linux AUR Compromise: Over 400 packages in the Arch User Repository were hijacked to distribute an eBPF rootkit and credential-stealing malware. The malware targets credentials and access tokens. Organizations using Arch Linux should:
  • Audit recently installed AUR packages
  • Check for indicators of compromise (IOCs to be published)
  • Review build scripts before installation
  • Consider restricting AUR usage in production environments
• npm Security Improvements: GitHub announced a new version of the npm package manager with security improvements including the ability to disable install scripts by default. This addresses a common vector for supply chain attacks. Organizations should plan to adopt the updated npm version.

Recommended Defensive Measures

• AI/ML Security: Organizations deploying AI coding assistants or agents should implement sandboxing and review the agentjacking research to understand risks. Consider restricting AI agent permissions and implementing human-in-the-loop controls for sensitive operations.
• Credential Hygiene: Given multiple incidents involving stolen credentials (Cal Water RTKBase, Arch Linux infostealers), organizations should:
  • Implement credential rotation schedules
  • Deploy multi-factor authentication universally
  • Monitor for credential exposure on dark web forums
  • Use secrets management solutions rather than embedded credentials

Resilience & Continuity Planning

Lessons Learned

• Physical Media Security (Kyushu Electric): The loss of a storage drive containing 10.9 million customer records reinforces the need for:
  • Mandatory encryption for all portable storage devices
  • Chain-of-custody tracking for media containing sensitive data
  • Regular audits of data stored on portable media
  • Consider eliminating portable media where cloud-based secure alternatives exist
• Long-Term Persistence (Velvet Ant): The revelation that China-linked actors maintained access for nearly a decade by compromising Linux authentication systems highlights:
  • Traditional endpoint detection may miss sophisticated persistence mechanisms
  • Authentication system integrity monitoring is critical
  • Periodic forensic analysis of core system components is warranted
  • Assume compromise and implement zero-trust architectures

Supply Chain Security Developments

• Dark Web Early Warning: Flare research indicates that GitHub access sales, leaked repositories, and stolen API keys appearing on underground forums often precede supply chain attacks. Organizations should consider dark web monitoring as part of their supply chain risk management program.
• Software Bill of Materials: The Arch Linux AUR compromise reinforces the importance of maintaining software bills of materials (SBOMs) and understanding the provenance of all software components in use.

Cross-Sector Dependencies

• Oracle PeopleSoft Exposure: The unpatched PeopleSoft zero-day affects multiple sectors including education, healthcare, government, and financial services. Organizations should map their PeopleSoft deployments and assess exposure across business units.
• AI Infrastructure Risks: As AI systems become integrated into critical infrastructure operations, vulnerabilities in AI frameworks (LangGraph) and attack techniques (agentjacking, prompt injection) create new cross-sector risks that security teams must address.

Regulatory & Policy Developments

Federal Developments

• Section 702 FISA Lapse: Warrantless wiretap authorities under Section 702 of the Foreign Intelligence Surveillance Act were cut off for approximately one week following a Congressional vote. While authorities have since been restored, this temporary lapse may have impacted intelligence collection relevant to critical infrastructure threat monitoring.
• CyberCorps Budget Concerns: Analysis indicates that while the CyberCorps Scholarship for Service program is adapting curricula to address AI-related cybersecurity threats, proposed budget cuts could undermine these efforts before they take effect. This has implications for the future cybersecurity workforce pipeline.

International Developments

• France Government Communications Security: The Tchap breach affecting 73,000 French government employees may prompt regulatory reviews of secure communications requirements for government systems across allied nations.
• International Law Enforcement Cooperation: This week's successful operations (Outsider takedown, AudiA6 disruption, Sniper Dz shutdown, Conti prosecution) demonstrate effective international cooperation in combating cybercrime. Organizations should be aware that law enforcement capabilities continue to improve.

AI Governance

• Claude Fable 5 Launch: Anthropic released Claude Fable 5, prompting industry discussion about dual-use AI capabilities, safeguards, and tiered access models. A claimed jailbreak was disputed by Anthropic. Organizations deploying advanced AI systems should monitor evolving best practices for AI safety and security.
• AI Sovereign Wealth Fund Proposal: Senator Bernie Sanders proposed an AI sovereign wealth fund, raising questions about government's role in AI development and potential implications for critical infrastructure applications of AI.

Training & Resource Spotlight

New Tools and Frameworks

• Microsoft AI Incident Response Playbook: Microsoft has released an incident response playbook specifically for AI systems. Organizations deploying AI should incorporate this guidance into their IR procedures.
• Bot Detection Guidance: Research indicates that many organizations significantly underestimate bot traffic on their websites. Security teams should review bot detection and mitigation capabilities.

Industry Research

• Sports Organization Cybersecurity: With the FIFA World Cup 2026 underway, Darktrace research reveals that over 80% of sports organizations were targeted by hackers in the past year. Organizations supporting major sporting events should maintain heightened security postures.
• ICS Exposure Analysis: Recent analysis indicates that ICS device exposure remains relatively flat even as the overall attack surface continues to widen. Critical infrastructure operators should continue internet-facing asset inventories and reduction efforts.

Looking Ahead: Upcoming Events

Conferences and Workshops

• June 22, 2026 - NIST Workshop on Hardware CPE and CVSS Updates: NIST is hosting a one-day workshop on hardware representation in the Common Platform Enumeration (CPE) and how the Common Vulnerability Scoring System (CVSS) applies to hardware. Relevant for organizations managing hardware asset inventories and vulnerability management programs. Registration information available from NIST.
• June 25, 2026 - Iris Experts Group Annual Meeting: Forum for discussion of technical questions related to iris recognition for U.S. government agencies. Relevant for organizations implementing biometric authentication systems.
• July 21, 2026 - NCCoE Cybersecurity Connections: Mobile Driver's Licenses: NIST National Cybersecurity Center of Excellence event on accelerating adoption of mobile driver's licenses. Relevant for transportation, identity management, and government services sectors.
• July 21, 2026 - NIST Time and Frequency Seminar: Annual seminar covering precision clocks, atomic frequency standards, and synchronization technologies. Relevant for telecommunications, financial services, and other sectors dependent on precise timing.
• September 2, 2026 - Safeguarding Health Information: HIPAA Security 2026: Joint HHS OCR and NIST event on HIPAA security requirements. Essential for healthcare sector organizations preparing for updated security requirements.

Threat Periods Requiring Heightened Awareness

• FIFA World Cup 2026 (Ongoing): Major sporting events historically attract increased cyber threat activity including DDoS attacks, credential theft campaigns, and scams. Organizations in hospitality, transportation, and entertainment sectors should maintain elevated security postures.
• Summer Travel Season: Increased travel creates opportunities for social engineering attacks using travel-themed lures. Organizations should reinforce employee awareness training.
• Oracle PeopleSoft Patch Window: Until Oracle releases a patch for CVE-2026-35273, organizations running PeopleSoft remain at elevated risk. Monitor Oracle security advisories closely.

Anticipated Regulatory Milestones

• CISA BOD Compliance Deadline - June 14, 2026: Federal agencies must complete Ivanti Sentry patching by Sunday. Private sector organizations should use this as a benchmark for their own patching timelines.

---

This intelligence briefing is compiled from open-source reporting and is intended to support critical infrastructure protection efforts. Recipients are encouraged to share relevant information with sector partners through appropriate channels. For questions or to report incidents, contact CISA at 1-888-282-0870 or report@cisa.gov.