Sellafield nuclear waste site to be prosecuted for alleged cybersecurity failings. CISA issues draft proposal for cyber incident reporting by critical infrastructure entities.

This intelligence roundup summarizes multiple high-impact items: alleged nation-state compromises at the Sellafield nuclear site, active cyber-espionage and malware campaigns against government and industrial targets (including an infostealer exfiltrating ~8.81 GB), a suspicious NuGet package likely used for industrial espionage, academic proof-of-concept exploits against web-based PLCs that claim broad vendor impact, and several critical ICS vulnerabilities and advisories; it also notes U.S. policy and readiness initiatives (CISA reporting proposal, DoD CORA).