[cyberav3ngers]

September 10, 2026

• LAPSUS$ posted a PGP-signed "Chapter II" message promising a first victim in three days (DarkWebInformer). Separately, APT IRAN, linked to IRGC-affiliated CyberAv3ngers, claimed the 7 September AT&T fiber outage across Houston, Dallas, Fort Worth and Austin plus an unnamed Texas water utility; AT&T says it has found no evidence the outage was an attack (DarkWebInformer). · Malware & Threat Activity

in One Exploit Kit, Four Espionage Crews: BlueMoon Turns Chrome's Patch Gap Into a Shared Weapon

July 30, 2026

• Minnesota's coordinated OT attack now spans 30+ community water systems, with Iran-linked CyberAv3ngers the leading suspect (earlier coverage). Attacks on July 26–27 knocked Braham's water plant offline and caused communications and automated-control failures in Plymouth, South St. Paul and Maple Plain; the state activated its incident-response capabilities and the FBI is engaged. Drinking water reportedly remained safe as operators fell back to manual procedures. BleepingComputer, The Register · Threat Activity

in OpenAI's Rogue Agent Widens: Four More Companies Caught in the Blast Radius