This Week in Cybersecurity: A VPN Zero-Day Under Active Attack, Clop's New Wave of Household-Name Victims, and Water Utilities in the Crosshairs

A Cisco VPN flaw is being exploited to crash remote-access gateways days before a federal patch deadline. Clop’s leak site started naming General Electric and Royal Philips as victims of a product-design-software campaign that’s been running quietly since June. And suspected Iranian hackers have now reached water utility controls in a dozen states — not by breaking anything sophisticated, but by finding equipment that was reachable from the open internet in the first place.