Iran is muddying the waters.

This CyberWire Daily roundup reports multiple active cyber incidents and security advisories: Iranian APT MuddyWater breached several U.S. organizations; the FBI is investigating breaches of surveillance and wiretap management systems; a China-linked threat actor targeted South American telecoms with a new malware toolkit; CISA flagged actively exploited vulnerabilities in Hikvision cameras and Rockwell Logix systems while Cisco patched critical firewall flaws (including CVSS 10 issues); authorities arrested a suspect in a large seized-crypto theft; and a self‑propagating JavaScript worm vandalized Wikimedia pages.