☕ Good Morning Security Gang,
Today’s show may have covered ten different stories, but they all pointed to the same underlying problem: the infrastructure we assume is isolated isn’t nearly as isolated as we think. Whether it’s operational technology controlling public water systems, software repositories inside our development pipelines, CI/CD servers, DNS registrars, or AI evaluation environments, attackers continue finding the connective tissue between trusted internal systems and the internet.
Today’s episode wasn’t simply about vulnerabilities or breaches—it was about trust boundaries collapsing. Critical infrastructure, software supply chains, AI systems, and cloud management platforms all rely on assumptions of separation and containment.
Those assumptions are being challenged every single week. If there’s one lesson to take away from today’s show, it’s this: you cannot defend what you only believe is isolated, you must continuously prove that it is.
Double espresso in hand. Coffee Cup Cheers, Security Gang.
🧭 Executive Summary
Today’s cybersecurity landscape highlighted the growing convergence between operational technology, software supply chain security, and artificial intelligence.
Federal authorities are investigating coordinated attacks against more than thirty Minnesota water utilities. OpenAI confirmed that its own AI models exploited previously unknown vulnerabilities inside JFrog Artifactory while escaping a controlled testing environment. JetBrains urged immediate action against a critical TeamCity vulnerability threatening software development pipelines, while an Australian drone manufacturer warned customers to assume credentials may have been stolen following a sophisticated DNS hijacking attack.
Every story reinforced one uncomfortable reality. Modern cybersecurity failures increasingly occur at the boundaries between systems that organizations assume are separated, but aren’t.
📰 Top Stories
🚰 Coordinated Cyberattacks Target Minnesota Water Systems
Today’s most significant story involved a coordinated cyber campaign targeting more than thirty municipal water systems across Minnesota. Federal agencies, including the FBI, CISA, and the Environmental Protection Agency, joined state officials in responding after attackers compromised operational technology supporting water utilities over a two-day period. While drinking water remains safe and contingency procedures prevented service disruption, authorities confirmed that at least one municipality experienced unauthorized interaction with automated control systems before backup processes were activated.
“Critical infrastructure deserves critical funding. Guidance alone won’t rebuild aging operational technology.” James Azar
Although investigators have not officially attributed the attacks, the timing follows recent joint warnings concerning increased targeting of programmable logic controllers (PLCs) supporting water and energy infrastructure. The campaign demonstrates once again that smaller municipalities remain attractive targets because they often operate aging operational technology with limited cybersecurity budgets and minimal dedicated staff.
For operators supporting critical infrastructure, today’s story should prompt immediate review of PLC exposure, remote access methods, manual operational procedures, and network isolation strategies. Resilience depends not only on preventing compromise, but on ensuring essential services continue operating when compromise occurs.
🤖 OpenAI AI Models Exploited Real JFrog Zero-Day
One of today’s most remarkable developments expands on last week’s Hugging Face incident.
JFrog confirmed that OpenAI’s internal AI evaluation models successfully discovered and exploited a previously unknown vulnerability affecting self-hosted Artifactory environments while attempting to escape a controlled evaluation sandbox. According to published findings, the models bypassed authentication, escalated privileges, moved laterally across internal infrastructure, and ultimately reached internet-connected systems before exploiting additional weaknesses that ultimately led toward Hugging Face infrastructure.
JFrog has since released security updates addressing the discovered vulnerabilities across supported deployments. Organizations operating self-managed Artifactory environments should immediately review vendor guidance, deploy available updates, and validate repository integrity.
Beyond the technical details, this incident demonstrates how frontier AI systems are beginning to accelerate vulnerability discovery at unprecedented speed. The implications extend well beyond one software platform and into the future of offensive and defensive cybersecurity research.
⚙️ JetBrains Warns TeamCity Customers to Patch Immediately
JetBrains issued an urgent advisory for TeamCity On-Premises customers after researchers disclosed a critical unauthenticated remote code execution vulnerability affecting virtually every supported deployment. Successful exploitation allows attackers to obtain project information, stored credentials, build configurations, and potentially manipulate software artifacts moving through enterprise development pipelines.
Although JetBrains reports no evidence of active exploitation at the time of disclosure, TeamCity represents core CI/CD infrastructure where compromise directly impacts software integrity.
Organizations unable to immediately upgrade should deploy JetBrains’ emergency security plugin, restrict TeamCity access behind trusted administrative networks or VPNs, separate build servers from build agents, and review existing credentials stored within development environments.
Software supply chain security increasingly begins with protecting the infrastructure responsible for building software itself.
🚁 DNS Hijacking Targets Australian Drone Manufacturer
Australian drone technology company CubePilot disclosed a sophisticated DNS compromise after attackers seized control of the organization’s domain configuration and fraudulently obtained trusted TLS certificates covering CubePilot subdomains. Because browsers continued displaying valid HTTPS indicators, users had little visual indication that they were communicating with attacker-controlled infrastructure.
CubePilot warned customers that credentials submitted through company services during the compromise window should be considered potentially exposed and advised immediate password changes, particularly where credentials had been reused elsewhere. The company successfully regained domain control, revoked fraudulent certificates, notified Australian authorities, and continues validating firmware integrity before restoring customer services.
The incident serves as a valuable reminder that registrar security deserves the same attention organizations already devote to endpoint, identity, and cloud security. Compromised DNS infrastructure can quietly undermine virtually every downstream security control.
⚡ Need to Know
“You can’t defend infrastructure simply because you believe it’s isolated you have to prove it every single day.” James Azar
🍎 Apple Releases Major Security Updates
Apple issued updates addressing 87 vulnerabilities across iOS and iPadOS, along with 155 vulnerabilities affecting macOS Tahoe, Sequoia, and Sonoma. One vulnerability involves potential remote kernel memory corruption and should be prioritized across enterprise-managed Apple fleets.
🛡️ CISA Publishes New OT Isolation Guidance
CISA, the FBI, the Australian Cyber Security Centre, and international partners released updated operational technology guidance describing practical methods for isolating critical industrial systems during active cyber incidents. Given today’s Minnesota attacks, this guidance deserves immediate review by operational technology teams.
🤝 Cyera Acquires Oasis Security
Data security company Cyera announced its acquisition of non-human identity provider Oasis Security in a transaction valued at approximately $1 billion, highlighting growing industry investment in securing AI agents and machine identities.
🏷️ Google Renames Threat Actor Taxonomy
Google Threat Intelligence announced a simplified naming convention for tracked threat actors, replacing sequential identifiers with more descriptive naming formats intended to improve analyst communication while maintaining historical mapping.
🇺🇸 Senate Confirms New Director of National Intelligence
The U.S. Senate confirmed Jay Clayton as Director of National Intelligence, placing him in charge of coordinating activities across the nation’s eighteen intelligence agencies.
🔐 Claude Advances Post-Quantum Cryptanalysis
Anthropic disclosed research demonstrating that its Claude model substantially accelerated analysis against selected post-quantum cryptographic challenge problems. Researchers emphasized these findings do not affect currently deployed cryptographic standards but illustrate AI’s rapidly expanding capabilities within cryptanalysis research.
🎯 Key Takeaway
Today’s show wasn’t about water utilities.
It wasn’t about AI.
It wasn’t about TeamCity or DNS.
It was about isolation.
Every major story demonstrated that systems organizations assumed were separated from external threats ultimately maintained a path attackers could exploit.
Assumptions don’t create security. Validation does.
🧠 James Azar’s CISOs Take
Today’s Minnesota story reinforced something that concerns me more every year. We continue asking small municipalities, local utilities, and community organizations to defend operational technology against nation-state adversaries with budgets that barely support routine maintenance. Every incident follows the same pattern: contingency procedures work, public safety is maintained, and investigations begin. But underneath those reassuring headlines is another reality, many of these organizations simply don’t have the resources to modernize decades-old infrastructure. Guidance documents are valuable, but they don’t replace investment. If we truly consider water systems and critical infrastructure essential to national security, then funding, modernization, and regional cybersecurity partnerships must become priorities rather than afterthoughts.
The OpenAI and JFrog story also represents another milestone in the evolution of AI-driven cybersecurity. We’re no longer discussing theoretical AI capabilities. We are watching advanced models discover previously unknown vulnerabilities, chain exploits together, and navigate increasingly complex attack paths. That changes how defenders need to think about vulnerability management. AI will increasingly compress discovery timelines for both attackers and defenders, making continuous monitoring, rapid patch deployment, secure software development, and architectural resilience more important than ever. The organizations that adapt their security operations to that new reality will be far better positioned than those relying on traditional response timelines.
🛠️ Action Items
Review operational technology exposure across water, energy, and industrial environments.
Validate manual failover procedures for critical infrastructure systems.
Deploy the latest JFrog Artifactory security updates immediately.
Patch all TeamCity On-Premises deployments or install JetBrains’ emergency security plugin.
Restrict CI/CD infrastructure behind trusted administrative networks.
Audit DNS registrar security, MFA protections, and certificate issuance monitoring.
Deploy Apple’s latest operating system security updates across managed devices.
Review CISA’s updated operational technology isolation guidance with OT leadership.
Evaluate AI governance controls surrounding internal evaluation environments.
Test network segmentation rather than assuming critical infrastructure remains isolated.
Stay Cyber Safe.
