Advertisement
American investigators believe Iranian hackers were likely behind a coordinated cyberattack that breached operating technology at more than 30 Minnesota water systems, briefly knocking one community’s plant offline. U.S. and state officials familiar with the investigation told The New York Times that the attackers’ methods — coupled with the absence of a ransom demand — initially pointed analysts toward Iran. Three state officials briefed on the investigation cautioned that the preliminary assessment could change as authorities collect more evidence. Investigators are also reportedly examining whether another group posed as Iranian hackers to inflame tensions. Minnesota has not formally blamed Iran or any other specific attacker. “Minnesota has not attributed the activity to a specific actor,” Minnesota IT Services, known as MNIT, said in a statement provided to Fox News Digital. The attack unfolded Sunday and Monday, targeting operational technology used to remotely monitor water towers and control wells, pumps and treatment equipment. State officials initially confirmed that more than 30 community systems were affected, while Minnesota Chief Information Security Officer John Israel later told the Times that hackers targeted 36 municipal systems. The scope of the attack may extend far beyond Minnesota. “Minnesota was one of the early detectors of this, but we’re seeing that this same threat activity has likely been occurring in other states throughout the nation,” Israel said. Acting Cybersecurity and Infrastructure Security Agency Director Nick Andersen similarly told the Times that federal officials were investigating “multiple potential incidents affecting local water utilities.” Despite the scale of the breach, officials said there was no known widespread disruption to drinking water or evidence that Minnesota’s water supply had been contaminated. As of Thursday, the Minnesota Department of Health was not aware of any active requests for residents to reduce or modify their water use. But the attack produced a frightening close call in Braham, a city of roughly 1,700 residents about 70 miles north of Minneapolis. Mayor Nate George said a plant employee discovered Monday morning that the city’s water tower was calling for more water, but the well supplying it was not running. “After learning that similar problems were occurring in at least four other Minnesota communities, Braham staff determined that the plant’s computerized control system had been compromised,” George said. Public works employees isolated the compromised system, restored a backup and restarted the plant within approximately 90 minutes. Residents continued receiving water stored inside the tower, but city officials temporarily asked them to conserve it. Other attempted attacks were publicly reported in Plymouth, South St. Paul and Maple Plain. Plymouth officials said crews continued operating the system during the communications outage, while South St. Paul moved to contingency procedures. No water-quality problems were reported in either community. The emerging suspicion surrounding Iran comes after CISA, the FBI, the Environmental Protection Agency and other federal partners warned about an ongoing campaign targeting internet-connected industrial controllers. “Iranian cyber actors continue to target U.S. critical infrastructure, and the FBI is committed to identifying, disrupting, and imposing costs on those responsible,” Brett Leatherman, assistant director of the FBI’s Cyber Division, said in the federal advisory. The advisory said Iran-affiliated actors had targeted water and wastewater systems, energy companies, government facilities and municipalities. In several cases, the hackers’ activities caused operational disruption and financial losses. A separate notice circulated by the Water Information Sharing and Analysis Center said Minnesota’s attacks were “aligned” with the Iran-affiliated campaign previously identified by CISA, according to WIRED. The hackers reportedly compromised remotely accessible programmable logic controllers — the industrial computers responsible for automating essential equipment. CISA warned utilities Thursday that the same actors were targeting water systems of every size and urged operators to remove programmable controllers from the public internet, strengthen passwords and restrict access to trusted devices. The federal government has confronted similar Iranian activity before. In 2016, the Justice Department charged Iranian hackers with accessing the control system for a small dam outside New York City. Iran-linked hackers have also previously targeted American water facilities using equipment manufactured in Israel. The FBI said it was working with other federal agencies to protect critical infrastructure but stopped short of publicly identifying a culprit in Minnesota. “The FBI is aware of recent public reporting around Water and Wastewater sectors,” the bureau told Fox News Digital. “The FBI and our interagency partners are fully engaged to protect critical infrastructure and we remain well-equipped to protect against cyber threats of all varieties.” MNIT said the investigation remains active as authorities work to determine the full reach of the attack and harden vulnerable systems. “Cyberattacks against critical infrastructure require a coordinated, whole-of-government response,” Israel said. “MNIT is working side by side with our partners to share intelligence, support affected communities, and help utilities restore operations safely while strengthening defenses against future attacks.” Advertisement
PAUL’S DEFENSE BRIEF (PDB): Spain deploys military to Ceuta as Spain and Morocco reinforce border after 60,000, mostly male Muslim Arab, migrants ‘invaded’ the Spanish north African city-enclave by sea and land in a single day. Ceuta, which shares a 5-mile land border with Morocco, sits on Mediterranean coast across Strait of Gibraltar from mainland Spain. A Spanish territory since 1580, it has a population of about 80,000. Spain will deploy its military to restore order at its border with Morocco in Ceuta after local authorities asked the central government in Madrid for reinforcements. Spain’s government said it would send the Armed Forces to help the Civil Guard “to maintain security in city of Ceuta.” Shocking videos show hordes of people, mainly young Moroccan men, storming around the breakwaters at Tarajal beach onto local roads. “The situation is absolute chaos,” the head of the association that represents Spain’s Civil Guard officers in Ceuta, who police the border, told AP. “It’s not possible to give precise numbers, but there are thousands of migrants crossing,” he said, adding that the border had “totally collapsed.” Both countries agreed to work together “for the return, as soon as possible, of all the people who entered Ceuta illegally.” But it's yet to be seen if and how they will accomplish this. FOR YOUR EYES ONLY – Here's the latest defense news from conservative national security expert PAUL CRESPO. THE PDB - Not the President's Daily Briefing, but almost as good – PAUL'S DEFENSE BRIEF: NATIONAL SECURITY Arms race for cheaper anti-ballistic weapons is underway. Winning the peace: The Democratic dilemma of limited war. Military and political outcomes have become increasingly disconnected. As Carl von Clausewitz observed, war is fought to achieve political objectives, with military force only one instrument among many in statecraft. We know how to protect our troops from telecom attacks. We’re just not doing it. Iran is targeting U.S. military personnel via their smartphones. War in Ukraine has supplied numerous stories of Ukrainian and Russian soldiers killed when their cell phones revealed their location. HOMELAND SECURITY Can cyber operations be deterred? What wargames reveal. Most successful deterrent threats leave no evidence behind. For policymakers, that is often the desired outcome. For researchers, it is a nightmare. DEFENSE POLITICS IRAN WAR U.S. and Iran trade missile barrages as hopes dim for quick resolution to five-month conflict. Drone strike near Suez Canal in Egypt raises new security threat in widening war. U.S. liberated Kuwait but now struggles to protect it from Iran. Since Kuwait’s liberation in first Gulf War, U.S. has used oil-rich emirate as one of Army’s biggest logistics hubs in world. Until now, U.S. military footprint gave Kuwait sense of security. MIDDLE EAST THREATS CHINA THREAT Pentagon says military dialogue with China is strongest in years. U.S. and Chinese defense officials are signaling renewed effort to improve communication between their militaries after years of mounting tensions and disrupted dialogue. America still has upper hand over China in its growing economic confrontation with U.S. RUSSIA THREAT/UKRAINE WAR NORTH KOREA THREAT SPACE THREATS INTERNATIONAL SECURITY Millions opposed military junta rule in Myanmar. Is their dream of a revolution over? US MILITARY END of PDB FOR MORE DETAILED, UNCENSORED, INTELLIGENCE AND ANALYSIS FROM PAUL CRESPO, subscribe to his SUBSTACK
PAUL’S DEFENSE BRIEF (PDB): House of Representatives passed its version of National Defense Authorization Act (NDAA) last week, leaving in place provision that would encourage co-development and co-production between U.S. and Israeli high-tech defense industries. House’s version of this provision, Section 219, comes amid dramatic shift in U.S. public opinion about military aid to Israel, as well as hysterical accusations that this effort would somehow “fuse” or “merge” U.S. and Israeli militaries. It certainly would not. It only entails joint R&D and co-producing high-tech weapons. The debate mostly centers around accountability and transparency. Though there is already co-production between the two countries on weapons systems, those efforts have been limited to defensive systems like Iron Dome. House version creates an executive agent position within Pentagon who would seek out and advocate for co-production opportunities. Rep. Ro Khanna, D-Calif., tried unsuccessfully to strike the measure when bill was in committee last month. Rep. Thomas Massie, R-Ky., has also been a vocal opponent. Despite passing in House, the Senate version of NDAA — including its version of Section 219, titled Section 1217 — could face tougher battle. Several Democrat senators have said they will not vote on NDAA without debate about the measure. FOR YOUR EYES ONLY – Here's the latest defense news from conservative national security expert PAUL CRESPO. THE PDB - Not the President's Daily Briefing, but almost as good – PAUL'S DEFENSE BRIEF: AIR FORCE ONE Boeing has now eaten $3B in Air Force One cost overruns with fresh $280 million loss to deliver two newly converted and fully equipped VC-25B presidential aircraft to Air Force, with first of these planes in 2028. Program remains over budget and years behind schedule. NATIONAL SECURITY DEFENSE POLITICS US POWER OVERSEAS Next first waves of amphibious assault will be unmanned. In Pacific War, Navy’s underwater demolition teams prepared way for amphibious landings on enemy-held islands. Air Force racing to create “Point Defense” Airmen specially trained and equipped to protect air bases from unmanned attack. But new report says even more is needed to defeat large-scale enemy drone attacks. IRAN WAR U.S. launches fresh strikes on Iran after days-long pause. Trump vowed to hit Iran "very hard" after it targeted base in Jordan that hosts U.S. troops, day after joint U.S.-Saudi strikes on Iran-backed militias in Iraq. U.S. strikes Iran as widening war engulfs more countries. MIDDLE EAST THREATS Why is Israeli settler violence reaching record levels in the West Bank? CHINA THREAT China fires YJ-20 hypersonic anti-ship missile from smaller Type 052D class destroyers. U.S. Coast Guard’s new Expeditionary Cutter Squadron in Western Pacific unlikely to shift Western Pacific power balance. It represents a “political signal” and “low-level deterrence” whose precise mission, outside support for Philippines, is still taking shape. RUSSIA THREAT/UKRAINE WAR Ukraine’s attacks on Crimea leave whole towns without power or water. Russia losing its grip on Crimea. EUROPEAN DEFENSE Wildfires raging west of Bordeaux are threatening number of France’s key defense-industrial sites, including facility that produces components for M51 submarine-launched nuclear ballistic missile, the final assembly line for Rafale fighter, and manufacturing sites for solid rocket motors for MBDA missiles. NORTH KOREA THREAT SPACE THREATS Space Force to launch 18 comms and targeting missions by end of 2027. INTERNATIONAL SECURITY Russia drives up oil flows through Arctic to maintain high exports. Mexico’s militarized police state. Amidst increased pressure from Team Trump and new Mexican president, author has warned that Mexico is headed toward an entrenched militarization trap. In 2024, a constitutional reform formally placed National Guard under military control. US MILITARY Pentagon calls for robot boats that launch attack drones. Spurred by threat of unmanned boats and small drones in contested waters such as Persian Gulf, military wants to quickly find cheap countermeasure. Pentagon commits over $120 billion for Patriot missiles and long-delayed submarines. Navy changes title for sailors working in cybersecurity to reflect ‘warfighting’ ethos. END of PDB FOR MORE DETAILED, UNCENSORED, INTELLIGENCE AND ANALYSIS FROM PAUL CRESPO, subscribe to his SUBSTACK
CAN IT BE DONE? Here are some options. As the on-again, off-again U.S. war against Iran continues, President Trump is now threatening to strike Iran’s nearly impregnable granite Pickaxe Mountain (known in Iran as Kuh-e Kolang Gaz La) which is reportedly being turned into the latest deep storage for Iran’s uranium centrifuges used to make weapons grade nuclear material. This is where the centrifuges were moved to after our 2025 strikes on Natanz. At least this is what Israeli intelligence suggests. Even if not confirmed, the possibility justifies a major attack. Unfortunately, the mountain’s geology makes it one of the most difficult targets in the world. Analysts place its main halls at least 100 meters beneath granite. Construction there began in late 2020 after the sabotage of the Natanz workshop [Iran’s advanced centrifuge assembly facilities]. Four tunnel mouths—the only known means of access—sit in two pairs, east and west. The International Atomic Energy Agency has never entered the [Pickaxe] complex. However, Israeli assessments indicate that Iran moved centrifuges there after the June 2025 strikes. Those facts, not the force of Washington’s rhetoric, define the mission. NOTE: The distance from Pickaxe to Natanz in the graphic is incorrect. Correct distance is 2km, or 1.2 miles. After the U.S. struck Iran’s deeply buried (but in much softer sedimentary geology) Fordow underground facility in June 2025 with 30,000lb GBU-57/B Massive Ordnance penetrator (MOP), defense planners concluded the operation had tested the absolute limits of conventional destruction. Partly in response to these deeply buried and heavily fortified underground nuclear sites, the U.S. military is now developing the Next-Generation Penetrator (NGP) to succeed the MOP. While intended to be more powerful with far deeper penetration ability, the NGP, at 22,000lbs or less, will also be lighter and able to be deployed by a wider variety of aircraft, including the F-35 fighter, rather than just heavy B-2 Spirit or B-21 Raider stealth bombers. However, even that yet-to-be-produced new weapon may not be enough to breach and destroy the facilities at Pickaxe Mountain which rises 5,250 feet above sea level. The U.S. and Israel had years to map out and build a complete targeting profile for Fordow, but very little time to do that for Pickaxe. Firing blindly at deep-buried barriers of unknown thickness with limited number of strategic assets is also not really a great option. This leaves Trump with only a few credible options to take out this critical Iranian nuclear target. One option is attacking the site with a penetrating low-yield tactical nuclear warhead. But that would be a big step. A low-yield nuke probably wouldn’t penetrate the hundreds of meters of granite, but it would breach the long-held taboo on first use of nuclear weapons, kill a lot of civilians, and dismantle the “exact framework used to justify the operation, providing every rogue state a permanent precedent.” It would also likely irradiate surrounding areas and keep anyone from ever verifying what we actually hit or conducting any real battle damage assessment (BDA). A more powerful nuke would magnify all those issues. As Jose Lev Alvarez Gomez explains: A surface or sub-surface detonation leaves the facility permanently inaccessible, sealed by lethal radiological contamination. Battle damage assessment becomes impossible; ground forces could neither verify the destruction of Iran’s centrifuges nor account for the 440.9 kilograms of 60-percent enriched uranium Tehran held before the 2025 war. Radioactive rubble and poisoned aquifers would permanently blind international monitors. In short, lasting strategic victory requires exactly what a nuclear strike prevents: eyes and boots inside the mountain. While detonating a nuke is still an option, it’s highly unlikely. Two other options may be better choices. One of them, that Trump has repeatedly mentioned, involves boots on the ground. Since Pickaxe Mountain is connected to Natanz via 1.2 miles of vulnerable logistical and communication lines -- shared power lines, fiber-optic routes, and secondary roads bind the two complexes together – Alvarez Gomez argue that American and Israeli planners must treat this mountain and the Natanz threat as a single nervous system and sever those arteries first. Then, he notes: …concentrated penetrator attacks must batter all four tunnel mouths. Repeated impacts should create rubble plugs that block movement; any residual openings would then provide entry routes for short-duration joint special-operations teams under continuous close air support. Their mission should be clear: destroy the remaining centrifuges with conventional high explosives, collapse the critical sections, and withdraw… Pickaxe must become a sealed tomb, not a recoverable redoubt. However, this may be a lot harder than it sounds. Ensuring that openings remain after any kinetic penetrator attack would be tough. Any ground force deployed on the ground deep in Iran would be difficult to protect even with air superiority. Recall our aircrew rescue missions in Iran not long ago. And they may come up empty, suffer major casualties, or fail. Still, a version of this is still an option. Still, there is a third compromise option, cheaper than any definitive solution, but effective, nonetheless. As Celio Ramirez notes separately in The Times of Israel, “It abandons the ambition to see inside and settles for something more cunning.” Ramirez continues: It does not aim to destroy the mountain; it aims to make the mountain talk. Collapse the entrances. The ventilation shaft and overhead power lines are exposed. Identifiable and reachable aerial targets, they are precisely the vulnerabilities heavy earth-penetrating ordnance exploits. Then observe what the regime does. This is not the ideal outcome. This will tell us how important the site is. While it neither destroys the deep chambers nor confirms what the mountain holds, it buys time and, more importantly, information. It also allows us the ability to strike at any regime attempts to reopen the site. It also allows us to use other options later, if truly needed. So, basically, we seal it, wait and watch. And re-strike, if needed. At the moment this may be the best option available. Advertisement
This Newsletter Sent by: American Liberty Defense News 1640 Boro Place 4th Floor McLean, VA 22102 Add us to your safe sender list to ensure our emails always reach your inbox. For more information on how we handle your data, view our Privacy Policy. To stop receiving these emails, you can Unsubscribe at any time. The views expressed in this newsletter are those of the authors and may not reflect the official policy of American Liberty Defense News. © 2026 American Liberty Defense News. All rights reserved |
||||||||||||||||||||||