Kimsuky's AI warfare, StormEncryptor ransomware, water infrastructure targeted by Iran

This briefing highlights multiple high‑risk threats: North Korea’s Kimsuky is running an offline AI stack to scale phishing and malware automation; a former Medusa affiliate is deploying a new StormEncryptor ransomware likely via N‑Central; Iran‑linked actors are actively targeting internet‑exposed water ICS/PLCs across a dozen+ U.S. states; researchers disclosed attacks undermining Windows passkey protections; and a BdThemes WordPress supply‑chain compromise injected rogue admin accounts — collectively presenting immediate, high‑impact operational and infrastructure risk.