FBI confirms cyberattacks on water systems in seven US states

Background

Ukraine has used cheap Shrike drones as weapons. These drones cost about $400 and carry explosives. Operators fly them manually to hit Russian targets like tanks and helicopters.

What happened

In mid-July, Ukraine's military started getting upgraded Shrike drones. A US company called Auterion added AI software and hardware to them. This AI lets the drones track and hit moving targets on their own. The two companies plan to deliver 50,000 of these upgraded drones soon.

Why it matters

Drones that aim themselves could help Ukraine fight with fewer pilots. Right now, operators must focus hard on every flight and stay in range. Self-aiming drones mean operators take less risk and can control more of them at once.

Background

UNAM is Mexico's biggest university. Its entrance exam decides who gets in. For decades, thousands of students took the test in person. This summer was different. Nearly 160,000 applicants took it remotely for the first time. They used a lockdown browser, which blocks access to other programs. AI-powered webcam proctoring software watched them take the test.

What happened

The results were wrong. Between May and early June, students took the exam over several weeks. When scores came back, they looked nothing like past years. Normally, 3.5 percent of test takers score 100 or higher on the 120-question test. This year, 16.3 percent did. At the very top, 5.5 percent scored 110 or higher, compared to 0.9 percent in prior years. The university decided 58,000 students must retake the exam.

Why it matters

If you are a student in Mexico, a flawed exam could change your college options. Right now this is a problem for UNAM applicants alone. But it shows a bigger risk: when schools and employers use automated proctoring, system glitches can break exams for thousands of people at once. What happened at UNAM may happen elsewhere.

Background

Palantir is a data analytics company. It helps governments and corporations find patterns in large amounts of information. The tech sector faced broad stock price drops earlier this year over AI concerns. Palantir was caught up in those declines, but its latest results show a sharp turnaround.

What happened

Palantir reported second-quarter revenue of $1.94 billion. That is a 93% increase from a year ago. Wall Street had expected $1.80 billion. The company also reported net income of $1.07 billion, or 41 cents per share, versus 13 cents per share a year earlier. Shares jumped 12% after the earnings release.

Why it matters

Many tech companies disappointed investors this year. Palantir's results show that at least some AI and data companies are finding real customer demand and making substantial profits. For people watching the tech sector, this suggests the AI market has some bright spots even as other firms struggle.

Background

Palantir is a data analytics company. It helps organizations understand large amounts of information. CEO Alex Karp studied philosophy and earned a PhD in social theory. On Monday, Palantir reported strong quarterly results.

What happened

In a letter to shareholders, Karp warned again that AI frontier labs are too risky for businesses to trust. He wrote that these labs have "Marxist overtones and undertones." He suggested they aim to control the core technology their partners depend on.

Why it matters

Enterprises increasingly rely on AI tools they do not fully control or understand. Karp's concern signals growing worry in business about this dependence. His warning may push companies to think harder about which AI partners they choose.

Background

Todd Blanche is the acting attorney general, leading the Justice Department. Two Republican senators had said they would block his permanent appointment. Their support was needed for him to keep the job full-time.

What happened

Blanche made a deal with the two GOP senators. He promised in writing to scrap a 1.8 billion dollar fund labeled the "anti-weaponization" fund. The deal removes the block to his permanent appointment.

Why it matters

The Justice Department now has a path to stable leadership under Blanche. The fund in question could have paid settlements to Trump allies. Scrapping it means those payments will not happen.

Background

Todd Blanche is the acting attorney general. In May, the Justice Department under his leadership created a $1.8 billion fund. It also gave Trump broad tax immunity. Now Blanche is seeking confirmation as the permanent attorney general.

What happened

On Sunday evening, Blanche posted two documents. He withdrew the May order that created the $1.8 billion fund. He also clarified that Trump's tax immunity applies only to past conduct. It covers Trump, his sons, and their businesses. Blanche made this deal with two Republican senators to secure support for his confirmation.

Why it matters

Democrats and legal experts say the deal is weak. Trump can easily reverse these promises once Blanche is confirmed. The president has the power to undo what Blanche agreed to. So voters concerned about potential misuse of the Justice Department should know these protections may not hold.

Background

Caruana Galizia was a reporter in Malta who wrote about financial crimes and corruption. In October 2017, she died in a car bombing. Yorgen Fenech, heir to one of Malta's biggest fortunes, is now on trial for her murder. He is accused of paying for her killing.

What happened

At Fenech's trial, a jury heard that Caruana Galizia was investigating Fenech and members of Malta's government when she died. Her son Matthew Caruana Galizia took the stand on Monday. He is a software engineer who helped his mother with her reporting work.

Why it matters

This trial is testing who was behind one of Europe's most high-profile journalist killings. The case centers on whether a wealthy businessman orchestrated the death of someone digging into his finances and ties to the government.

Background

Russia's Krasnodar region sits on the Black Sea coast. It is home to beaches and resorts where Russians spend leisure time. Ukraine and Russia are at war. Both sides claim the other targets civilians. Neither admits doing so deliberately.

What happened

A drone struck a beach in Arkhipo-Osipovka on August 3. Seven people died, including three children. About 40 others were hurt, with 17 taken to hospital. Russian officials said four more died in a separate strike on Crimea. Russia also blamed Ukraine for an explosion at a Moscow restaurant that killed five.

Why it matters

The strikes hit places where civilians gather to relax, not military targets. They show the war is reaching far from the front lines into everyday life. Russians visiting a beach or dining out now face risk of attack.

Background

NHS England runs the main health service for England. It uses systems called data platforms to collect and share patient information across hospitals and clinics. The Federated Data Platform is one such system. NHS England published a Data Protection Impact Assessment, a required document showing how it keeps patient data safe.

What happened

NHS England apologized and admitted that workers from Palantir and other suppliers can access identifiable patient data through the Federated Data Platform. The apology came after the organization acknowledged its transparency document contained false claims. That document had said only NHS staff could see such sensitive information.

Why it matters

Patient data is one of the most sensitive types of information a health system holds. When the NHS said only its own staff could access it, the public had less reason to worry. Now that claim has been proven wrong. The apology shows the NHS is correcting the record, but it raises questions about what oversight exists for outside suppliers who handle patient information.

Background

In July, the Trump administration put new tariffs on goods from 60 countries. A tariff is a tax on imported goods. The administration said these countries have not done enough to stop forced labor. The targeted countries include the UK, China, and the European Union.

What happened

Twenty five US states sued the administration on Monday to block the tariffs. The tariffs are 10% to 12.5% on affected goods. In court documents, the states called the tariffs arbitrary and against the law. A White House spokesman said the US was using its legal authority to protect American workers.

Why it matters

Tariffs raise prices on imported goods. Higher prices can affect what consumers pay for everyday items. The states argue the tariffs harm their economies and businesses that rely on trade. How courts rule on this case could shape US trade policy for years ahead.

Background

Water systems are critical infrastructure that supply drinking water to homes and businesses. Cyberattacks on these systems are dangerous because they can disrupt service or damage equipment. The FBI recently reported attacks on water infrastructure across the country.

What happened

At least seven states have been targeted in cyberattacks on water systems. Federal officials now believe Iran is likely behind the attacks. The FBI is investigating the growing wave of incidents.

Why it matters

Water systems serve millions of people daily. Successful attacks could disrupt access to clean water or compromise water safety. These attacks show that critical services remain vulnerable to foreign threats.

Background

N-able N-central is remote management software. IT professionals use it to monitor and control computers and networks across organizations. A serious flaw in the software is being actively exploited by attackers in the wild.

What happened

On Monday, CISA added the flaw to its Known Exploited Vulnerabilities catalog. The flaw, tracked as CVE-2026-18577, has a severity score of 8.2 out of 10. It allows attackers to bypass authentication and take over accounts. The issue stems from incomplete patching of an earlier flaw. N-able released a fix in version 2026.3 HF1.

Why it matters

If your company uses N-central and has not patched to version 2026.3 HF1, attackers can log in as administrators without credentials. This means they could access or steal data from your networks. You should update the software right away if your organization relies on it.