On this week's Security Sprint, Dave and Andy are joined by Chase Snow to talk about the latest cyber incident involving water facilities. They covered some of these topics:

Opening:

• Crypto security breaches surpass $1B in H1 2026, hit record high — Crypto Briefing

• CISA, ASD’s ACSC, and Partners Release Joint Guidance on Isolating Vital Operational Technology and Enabling Systems During Crisis. The Cybersecurity and Infrastructure Security Agency (CISA) and the Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC), in collaboration with the Federal Bureau of Investigation (FBI) and international partners, published joint guidance CI Fortify – Advice for isolating vital systems.

• CI Fortify – Advice for isolating vital systems — Australian Signals Directorate

• When cyber attacks happen: helping organisations recover — United Kingdom National Cyber Security Centre

Water Sector Cyberattacks:

• Iran’s CyberAv3ngers claim ‘attacks on U.S. infrastructure,’ vow more in first statement since Minnesota water hacks

• Trump rejects Iran blame for Minnesota cyberattack, points finger at 'corrupt' political foe

• Trump blames Minnesota for cyberattacks on water sector, drawing pushback from cyber world — CyberScoop — 31 Jul 2026. With commentary from Gate 15 and WaterISAC.

• Several states report cyberattacks as spy agencies suspect Iran is targeting water — The Washington Post — 01 Aug 2026. WaterISAC analyst Alec Davison said attackers used relatively unsophisticated methods against internet-connected programmable logic controllers, then changed passwords, locked out operators, and disconnected controllers, resulting in boil-water notices and sustained manual operations.

• (TLP:CLEAR) CISA Issues Alert Urging Water and Wastewater Utilities to Protect OT Against Activity Targeting PLCs — WaterISAC

• Iran suspected of conducting cyberattacks on US water suppliers in 45 municipalities — small towns mostly targeted, with utilities switching to manual control

In the latest episode of Nerd Out, Dave and Alec break down recent developments in the conflict with Iran and consider whether the situation could widen, along with the broader factors event professionals should keep in mind. They also discuss the Berlin vehicle ramming attack and what it may signal for future outdoor event planning and security. Looking ahead to the fall event season, they explore how current geopolitical dynamics could shape risk considerations. The episode wraps with a lighter segment as Dave and Alec share their thoughts on The Odyssey, catch up on Game of Thrones, and look forward to the latest Spider-Man.

References from the pod include:

Iran Conflict - Horizontal Escalation

• https://www.reuters.com/world/asia-pacific/us-saudis-attack-iran-backed-groups-iraq-threatening-intensify-conflict-2026-07-29/
• https://www.france24.com/en/middle-east/20260727-yemen-says-ready-for-houthi-escalation-after-rebels-target-saudi-arabia
• https://oilprice.com/Energy/Energy-General/Ukraines-Attack-on-Iranian-Cargo-Ship-Links-Two-Wars.html

Iran Cyber Activity in the Homeland

• https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-097a
• https://www.dataminr.com/resources/blog/implications-of-recent-cisa-disclosures-on-iranian-ot-targeting/

Berlin Terrorist Attack and Security Resources for Large Gatherings and Outdoor Events

• https://www.bbc.com/news/articles/cevmdxz4872o
• https://archive.dni.gov/index.php/nctc-how-we-work/joint-ct-assessment-team/first-responder-toolbox/opportunistic-attacks/vehicle-borne-attacks-tactics-and-mitigation
• https://www.cisa.gov/resources-tools/resources/vehicle-incident-prevention-and-mitigation-security-guide
• https://www.cisa.gov/topics/physical-security/securing-public-gatherings

On this week's Security Sprint, Dave and Andy covered the following topics:

Opening:

• Cybersecurity Regulations: Multiple Sectors Are Subject to Potentially Duplicative Reporting Requirements — U.S. Government Accountability Office & 70% of federal cybersecurity reporting rules are duplicated, GAO finds — CyberScoop

• ANCHOR-CI could fix 20 years of broken government-industry collaboration — CyberScoop

• Project Pilot: Can AI models fly drones? — Anthropic —

• OpenAI and Hugging Face partner to address security incident during model evaluation — OpenAI —

• Bluesky Thread: OpenAI and Hugging Face incident demonstrates both autonomous cyber risk and defensive potential — Pwnallthethings

• Hugging Face CISO Post Mortem — Cloud Security Alliance

Main Topics:

1 dead, 16 injured after car ramming at Berlin CSD Pride event — DW — 25 Jul 2026. One person was killed and 16 others were injured after a vehicle was driven into people attending Berlin’s CSD Pride event. Authorities investigated the circumstances and potential motive behind the incident as emergency personnel treated victims and secured the area. The attack underscores the vulnerability of large public gatherings to vehicle-based violence and the potential for mass casualties within seconds.

• The suspect in the deadly Berlin Pride attack is killed in a confrontation with police

• Car Plows Into Crowd at Berlin Pride Event in Suspected Terror Attack

‘Integrated’ cyber and physical attacks concerned FIFA planners — StateScoop — 20 Jul 2026. Security planners for the 2026 FIFA World Cup prepared for blended attacks combining cyber disruption, physical violence, disinformation, swatting, infrastructure attacks, and interference with emergency communications.

• The Gate 15 Interview EP 60 – Sasha Larkin: “I like the chaos, chaos makes sense to me.”

2026H1 Threat Review: Vulnerabilities Up 51% Year Over Year — Forescout — 20 Jul 2026. Forescout reports a 51 percent year-over-year increase in vulnerabilities during the first half of 2026 as organizations contend with accelerating disclosure volumes across IT, Internet of Things, operational technology, and connected devices.

Email threat landscape: Q2 2026 trends and insights — Microsoft Security — 23 Jul 2026. Microsoft detected approximately 7.6 billion email-based phishing threats during the second quarter, while monthly volumes declined modestly from April through June.

Quick Hits:

• Weekly ransomware & data leak landscape — eCrime.ch — 27 Jul 2026. eCrime.ch recorded 236 public ransomware and data-leak claims involving 45 active groups during the seven-day period ending 27 July, with 63 events showing public evidence of data leakage. Qilin led with 37 claims, followed by Gentlemen and Global Secret Group with 31 each, while construction was the most frequently targeted sector with 17 incidents. The United States accounted for 103 claims, and healthcare recorded 10 incidents among the 88 sectors represented.

• Pay up or not? Ransomware surge has victims facing tough choices — Ars Technica

• If you pay a hacker’s ransom, chances are that they’ll come back for more

• Cl0p Exploitation of PTC Windchill & FlexPLM (CVE-2026-12569) — Ransom-ISAC — 22 Jul 2026. Ransom-ISAC, eCrime.ch, and DEFUSED warn that Cl0p ransomware affiliates are actively exploiting internet-exposed PTC Windchill and FlexPLM systems.

• Black Kite’s 2026 Ransomware Report: Ransomware Accelerates 60% in Six Months and Shows No Signs of Slowing as New Ransomware Groups Emerge Weekly

On this week's Security Sprint, Dave and Andy covered the following topics:

Opening:

• The Gate 15 Interview EP 72. Amira Dhalla on Take9, the Power of the Pause, SS26 and the World Cup!

• Defending the Collective — AI Powered Threats and the New ISAC Playbook — Cyber Threat Alliance

Main Topics:

Ransomware & Cyber Threats

• Health-ISAC: Health Sector Heartbeat 2026 Q2 - 2026: Q2 Cybersecurity Trends and Threats in the Health Sector

• June Incident Response Insights — Health-ISAC

• 2026 Health-ISAC CISO Benchmarking Report — Health-ISAC

• 15 Latest Cyber Threat Trends Shaping Cybersecurity in 2026 — CloudSEK — 19 Jul 2026. CloudSEK identified ransomware, phishing, artificial intelligence-enabled attacks, deepfakes, zero-day exploitation, supply-chain compromise, insider threats, cloud weaknesses, credential abuse and quantum threats, among the major cyber risks shaping 2026.

Kidnappings Increased 60 Percent Between 2020 and 2025, Analysis Says — Security Management — 16 Jul 2026. Recorded kidnappings increased 60 percent globally between 2020 and 2025, with every region except Asia Pacific reporting growth. Mass kidnappings increased 154 percent as criminal groups exploited conflict, displacement, inequality, and weak state security, particularly in parts of Africa. Perpetrators are also draining victims’ mobile banking accounts, making repeated ransom demands, and targeting cryptocurrency holders based on information gathered through social media.

Iran hackers resume threats to hit critical infrastructure with ‘unforgettable lessons’ — Threat Beat — 19 Jul 2026. The Iran-linked Handala group resumed public threats against U.S. and allied critical infrastructure following the collapse of the ceasefire and renewed military strikes. The group referenced electricity, water, fuel, retail, and information technology targets and warned of future actions intended to deliver unforgettable lessons. Handala previously claimed destructive attacks against a U.S. medical technology company and alleged compromises involving water utilities, ports, and government personnel, although individual claims require independent verification. Target is energy, water, healthcare, maritime, retail, government, and information technology organizations in the United States and allied countries. Dig highlights renewed Iranian cyber signaling that may precede disruptive, destructive, or hybrid operations against civilian infrastructure during the expanding conflict.

• Iran strikes Kuwait plant critical to drinking water supply — Straight Arrow News

Quick Hits:

• Beware of Disaster Fraud — Federal Emergency Management Agency

• DHS network intrusion was twice ruled a false positive before breach confirmed

• The Explosive Diarrhea Outbreak Is About to Get Much Bigger

• Cyclosporiasis Outbreak with Unknown Source — Centers for Disease Control and Prevention

• Everyone Thinks They Have This Diarrhea Parasite. Do They?

• House Passes Seven-Year TRIA Reauthorization — The Real Estate Roundtable

In this episode of The Gate 15 Interview, Andy Jabbour speaks with Amira Dhalla, Director, Cyber Civil Defense, Aspen Digital. Amira is an experienced advocate and educator working on privacy and security issues to make technology more inclusive, open, and safe while also advocating with communities to create a secure digital movement.

• Amira on LinkedIn

• Take9: 9 Seconds for a Safer World. Scammers are getting smarter, but you can stay ahead of them. How? Count before you click! Count von Count is here to help you take a 9 second pause and think before you click, download, or share.

• Take9 on LinkedIn

• Take9 on Bluesky

• Take9 on InstaGram

• Take9 on TikTok

• Take9 on Facebook

• Aspen Digital

• Aspen Digital: 2026 Aspen Cyber Summit, 18 Nov, Washington, DC.

In the podcast, Amira and Andy discuss:

• Amira’s background, current role, and Take9.

• Take9, Newmark Philanthropies & Cyber Civil Defense Leadership Role

• Take 9 Cybersecurity Campaign

• Cybersecurity Awareness and Personal Responsibility

• Cybersecurity and Human Error Prevention

• Take 9 Program Overview

• Take Nine Campaign Update

• We play Three Questions! Pizza, World Cup, SS26, and more!

On this week's Security Sprint, Dave and Andy covered the following topics:

Opening:

• The Show Must Go On: Building Cyber Resilience for Venues — Global Awareness Professionals — 08 Jul 2026. Global Awareness Professionals published a Gate 15 guest post on strengthening venue cyber resilience through assessment, planning, exercises, and post-incident learning.

• Lessons from CISA's Cyber Incident — Cybersecurity and Infrastructure Security Agency — 09 Jul 2026. CISA disclosed lessons from its response to an incident involving credentials exposed through a publicly accessible software repository.

Main Topics:

New York to ban smart glasses from all courthouses. All courts in New York state will ban smart glasses starting later this month. Beginning on July 20, all eyewear or headwear that contains cameras, microphones or other recording technology will not be allowed inside any Unified Court System facilities, according to a memo from the Office of Court Administration. The ban applies to more than 1,240 state, county, city, town and village courts.

Terrorism / Extremism

• When violence shapes identities: In a larger pool of perpetrators. — Europol — 13 Jul 2026. Europol's European Union Terrorism Situation and Trend Report 2026 assesses that terrorism in Europe is becoming increasingly decentralized, with a broader and more diverse pool of perpetrators motivated by jihadist, right-wing extremist, left-wing extremist, anarchist, separatist, and single-issue ideologies. The report notes continued growth in lone-actor violence, online radicalization, youth involvement, and hybrid ideological influences that blur traditional threat categories. Europol emphasizes that violent extremist ecosystems increasingly reinforce one another through online platforms, propaganda, and shared narratives even when ideological goals differ.

• Feared for years, an Iranian attack on US soil has not materialized. Here’s why. — Christian Science Monitor — 10 Jul 2026. The article examines why Iran has not conducted a large-scale retaliatory attack inside the United States despite decades of concern from U.S. intelligence and security officials.

• Blurring Terrorism and War: Russia’s Counter-Terrorism Framework and the Risks for International Partners — International Centre for Counter-Terrorism — 09 Jul 2026

• 8 men indicted in planned drone and sniper attack on White House UFC cage-fighting show — Associated Press — 10 Jul 2026

Severe Weather:

• CSU Hurricane Seasonal Forecasting — Colorado State University — 08 Jul 2026. Colorado State University’s initial seasonal hurricane forecast and press release for 2026 was released on Thursday, April 9, 2026 and updated on Wednesday, June 10, 2026 and Wednesday, July 8, 2026.

• Taiwan, Japan and south-eastern China brace for Typhoon Bavi as landslides kill 15 in Philippines

• 100 million Americans face dangerous heat as temperatures surge

• A ‘super’ El Niño is brewing. Experts fear historic dangers from extreme weather

Quick Hits:

• NSA and Partners Release Guidance on Improving Router Hygiene to Protect Against Russian State-Sponsored Targeting — National Security Agency — 13 Jul 2026

• Frontier AI models and their impact on cyber security – an update on AI model harnesses — Australian Signals Directorate — 13 Jul 2026

• Cyber Shield: The path to an agentic AI future for cyber defence — National Cyber Security Centre — 07 Jul 2026

• National Day of Protest Against Data Centers on July 18—Map, List of Cities — Newsweek — 09 Jul 2026

• CISA expects to finalize key cyber reporting rule by September — Nextgov/FCW — 06 Jul 2026

On this week's Security Sprint, Dave and Andy covered the following topics:

Opening:

• The Next WannaCry Won’t Look Like WannaCry: Nine Years Later, Ransomware Has Evolved. The Resilience Fundamentals Haven’t. — Gate 15

• ANCHOR for Critical Infrastructure — CISA

• Hackers breached DHS information-sharing network, people familiar say & Department of Homeland Security (HSIN) Cybersecurity Incident Details

Main Topics:

Info Ops:

• Four years into Ukraine invasion, Russia turns influence-ops back to US and Europe — The Register

• A Look at the Drivers, Dynamics, and Applications of the Pro-Russia Influence Ecosystem — Google Cloud Blog

• GRU: military unit 67606 — Lab52

• More info ops: Blaming the Deep State for Earthquakes and Heatwaves

• Related concerns: States rebuild election security information-sharing after Trump cuts — USA TODAY

Weather, Climate & Environment:

• National Weather Service updates. Read More

• Heat Domes Are Dangerous. July Fourth Activities Will Make Things Worse

• Be #SummerReady: Your Guide to Staying Safe and Cool During Extreme Heat — FEMA

Gate 15 TARGET Report: Public Health Updates (09 Jul 2026)

• Ebola outbreak containment hampered by USAID closure, experts say

• Former CDC chief medical officer says RFK Jr. caused ‘irreparable harm’

• Deadly Screwworm’s Leap Into the US Mystifies Health Experts

Quick Hits:

• Thomasville man arrested in High Point church parking lot

• H1 2026 Crypto Hacks Reach Record High as Losses Fall Below USD 1 Billion

• Ransomware Roundup: H1 2026 stats on attacks, ransoms, and active gangs

• Russian group hacked Quebec water treatment plant, gained access to control pumps and chlorine dosing: CSE

• FortiBleed: 86,644 Fortinet Firewalls Compromised

On this week's Security Sprint, Dave and Andy covered the following topics:

Opening:

• Celebrating America!

• The End of Routine Patching — Gate 15

• Nerd Out EP 71. Hostile Events Attack Cycle UFC Style, Plus Drones and Extremist Activity

• The Gate 15 Interview EP 71. ONE-ISAC Returns! Security, Sauces and Streaking, with Scott Moore and Angela Haun

• FB-ISAO Newsletter, v8, Issue 6 — Faith-Based ISAO

Main Topics:

Severe Weather, Climate & Environment:

• Dangerous heat wave hits the US with highs exceeding 100 degrees

• NWS daily updates. Read More

• Power outages hit France as record heatwave set to peak

• London Climate Action Week foiled by climate change

• Mekkhala becomes strongest June typhoon in 22 years, heads toward Japan

• Venezuela earthquakes

Extremism:

• White nationalist groups are recruiting girls and young women

• Terrorism and Targeted Violence (T2V) in the United States: Overview of 2023-2025 Data

New Proofpoint Report: 2026 AI and Human Risk Landscape

• 87% of organizations have AI assistants deployed beyond pilot

• 63% have controls—but 52% don’t trust them

• Only 33% are fully prepared to investigate AI-related incidents

• 12% of successful scams in 2025 used AI deepfakes, according to poll of U.S. adults

Drones:

• Russia Hit by 660-Drone Overnight Barrage Targeting Moscow, Crimea and Key Military Sites

• FBI warns battlefield-style drone attacks could reach US: 'Only a matter of time'

Quick Hits:

Thomasville man arrested in High Point church parking lot

Water: America’s Most Critical Lifeline!

• (TLP:CLEAR) WaterISAC’s Quarterly Water Sector Incident Summary, January to March 2026 – Executive Summary

• Threat Intelligence Report: Nation-State Targeting of Water Systems 2024–2026

• EPA launches 2026 National Cyber Drill to test water utility resilience during communications outages

• Cal Water Finds No Evidence of OT Activity After Hackers Claimed They Could Disrupt Water Supply

Ransomware & Data Breaches:

• A $2.5 Billion Whodunit: The Hack That Dented the U.K. Economy

• $2.5 Billion in Damage, Zero Ransom Demand: Russia’s New Playbook

• Russian hackers were behind $2.5 billion hack of Jaguar Land Rover, report says

On the latest episode of Nerd Out, Dave and Alec go deep into the planning that went into the disrupted hostile event planned for UFC 250. They go into the planning and preparedness activities and align it to the Hostile Event Attack Cycle (HEAC). A key part of this planning was the use of drones and what it means for future events. Dave and Alec then looked at the current situations in Ukraine and Iran and how the use of drones have been leveraged to change the game.

Turning to other nerd news, Dave and Alec broke down the newest Spider Man trailer and the new season of Game of Thrones, plus talk about Spider Noir and Super Girl.

UFC Violent Extremist Attack Plot

• Inside the Alleged Plot To Make UFC White House Event a Killing Zone

Growing Threat of Drones in Warfare and to Homeland Security

• Ukraine’s Drone Campaign Puts New Pressure on Moscow

• Iran’s Drone Strategy (Part 1): Wartime Performance and Adaptations

Islamic State Activity

• Counter-terrorism operation disrupted Islamic State Khorasan Province activities

In this week's Security Sprint, Dave and Andy covered the following topics:

Main Topics:

UFC 250 Attack Plot:

• FBI Arrests Two More Men in Washington and Missouri in Connection with Planned Attack on Government Officials at White House UFC event

• Five Men Arrested and Charged in Plot to Attack and Kill Government Officials and Others Attending the Ultimate Fighting Championship at White House

Ransomware & Data Breaches: A Small Southeastern Hospital Had Effective Cybersecurity Controls To Prevent, Detect, and Respond To Cyberattacks — HHS Office of Inspector General — 12 Jun 2026. HHS OIG found that a small southeastern hospital had effective cybersecurity controls to prevent, detect, and respond to simulated cyberattacks. The hospital used controls that included a custom system to block unusual or suspicious activity and detected OIG testing as suspicious.

• Killing me Gently: Inside GentleMans EDR killer framework — WeLiveSecurity by ESET

• Risky Bulletin: Klue breach impacts security firms — Risky Business

• eCrime weekly report tracks ransomware victim claims — eCrime.ch

• Prinz Eugen ransomware: a deep dive into a new Go-based encryptor

• Cato CTRL™ Threat Actor Profile: ShinyHunters – The Brand That Outlasts the Takedowns

FBI & FTC Alerts

• Scammers Use Couriers to Collect Cash in Cryptocurrency Investment Scams

• Protect Your Property from Illegal Sales Through Parcel Owner Impersonation

• Cyber Criminals Redirecting Users to Fraudulent Websites with Malicious Traffic Distribution Systems

• FTC Data Show People Reported Losing $3.5 Billion to Imposter Scams in 2025

• Take9: 9 Seconds for a Safer World. Scammers are getting smarter, but you can stay ahead of them. How? Count before you click! Count von Count is here to help you take a 9 second pause and think before you click, download, or share. And Take9 will join Andy for the July Gate 15 Interview!

Terrorism & Extremism: ISIS Editorial Calls For Lone Actor Attacks On FIFA World Cup Matches In U.S. Cities — HSToday — 19 Jun 2026. HSToday reports on a MEMRI assessment of an ISIS editorial in Al-Naba’ calling for lone actor attacks against FIFA World Cup matches in U.S. host cities.

• Terrorist Use of AI to Facilitate Fraud Requires Adaptability — National Counterterrorism Center

• Counter-terrorism operation disrupted Islamic State Khorasan Province activities — Europol

• FGCU student arrested after allegedly making violent threats on Discord — Gulf Coast News

• Person detained after bomb squad searches suspicious vehicle near Islamic Center of San Diego

• Blackout: Inside Germany’s far-left war on infrastructure — Politico Europe

• How State-Sponsored Hybrid Threats Are Reshaping Executive Protection in a Post-Epic Fury World

Quick Hits:

• Temperatures exceed 40C in European heatwave, three die in France

• Tropical Rainstorm Arthur makes landfall in Texas, raising flood risk across southern US