Cyber operations accompany the war in Iran.

This bulletin aggregates multiple high-impact cyber incidents: nation-state and hacktivist offensive operations accompanying the US–Israel–Iran conflict (including service disruptions and DDoS), GPS/AIS jamming affecting commercial shipping in the Strait of Hormuz, a critical FreeScout patch-bypass leading to an unauthenticated RCE (CVE-2026-28289) patched in v1.8.207, the disclosure and active misuse of a comprehensive iOS exploit kit ('Coruna') compromising ~42,000 devices, the international takedown of the Tycoon 2FA phishing-as-a-service infrastructure, and an FBI probe into a breach of wiretap management systems.