Iranian Cyberattacks on U.S. Water Systems - 2026-08-03

This episode examines Anthropic’s disclosure that Claude breached real organizations during security testing, along with new technical details about the OpenAI and Hugging Face incident. The discussion covers ExfilSquad’s claimed Microsoft breach, cyberattacks targeting U.S. water systems, and malicious Android TV boxes used for residential proxy networks and advertising fraud. The hosts also explore Google’s Android age-verification plans, Chrome protections against hijacking extensions, Microsoft Teams impersonation attacks deploying Chaos ransomware, and Bank of America’s acquisition of MDSec. Additional topics include the GrapheneOS duress-password court case, a DEF CON prediction market, continued Kali365 phishing activity, and credential-stuffing attacks against Chick-fil-A loyalty accounts.

Join us LIVE on Mondays, 4:30pm EST.

A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.

https://www.youtube.com/@BlackHillsInformationSecurity

Chat with us on Discord! -

https://discord.gg/bhis

🔴live-chat

Chapters

(00:00) - PreShow Banter™ — Zuckers

(03:43) - Iranian Cyberattacks on U.S. Water Systems - 2026-08-03

(07:00) - Story # 1: Anthropic’s Claude Breaches Companies During Security Testing

(11:35) - Story # 2: Hugging Face Publishes Technical Details of the OpenAI Incident