Two Russians sanctioned over cyberattacks on US critical infrastructure

The US Treasury designated two alleged members of the Cyber Army of Russia Reborn (CARR) for attacks on critical infrastructure—claiming the group remotely manipulated HMIs/SCADA at water and energy facilities in the US and Poland, causing tank overflows and lost water—while noting CARR's limited technical sophistication and referencing third-party attribution linking some activity to GRU-linked Sandworm; the piece also describes recent LockBit affiliate convictions.