The feds flip the script.

A CyberWire Daily roundup reports multiple active cybersecurity incidents and trends: US authorities disrupted China-linked hacking platforms; CISA observed attacks targeting more than 100 water systems; attackers are actively exploiting a critical Gitea code injection vulnerability and abusing npm mirrors for phishing; Boston Scientific suffered a global-impact cyber incident; criminals are using AI-powered phishing against iPhones and a money mule has been charged in a large scam—alongside industry updates on cyber insurance costs and an AI runtime evidence standard.