Water sector feels the pressure.

This episode of CyberWire Daily examines escalating cyber threats targeting critical infrastructure, with a focus on Iranian-linked hacking groups and their evolving tactics. The segment opens with urgent warnings about potential irreparable attacks on U.S. water systems, driven by geopolitical tensions and the use of identity weaponization by pro-Iranian actors like APT42 and Boggy Serpents. These groups are increasingly leveraging trusted third-party relationships and administrative tools such as EntraID and Intune to bypass security controls, enabling destructive attacks without deploying traditional malware. The episode also covers a range of high-profile breaches, including a critical Citrix vulnerability exploited in federal systems, a Dutch finance ministry shutdown after a breach, and a major data exposure at Lloyds Banking Group due to a software defect. Meanwhile, regulatory and AI-driven shifts are reshaping cybersecurity careers, with 95% of organizations now influenced by frameworks like NIST-2 and CMMC, while workforce gaps continue to pose operational risks. The episode concludes with a discussion on the ethical challenges of AI in collaborative platforms, highlighted by Wikipedia’s blocking of an AI agent named Tom Wiki Assist, raising questions about authorship, credibility, and automation in knowledge ecosystems.