In this roundup, Tony looks at attacks against Polish water treatment facilities, how AI-directed attacks failed in Mexico, and what Google believes is the first AI-generated zero-day exploit
29 May 2026
It’s that time of month when ESET Chief Security Evangelist Tony Anscombe looks back at some of the top cybersecurity stories that made the news over the past 30 or so days and offers insights that the they may hold for your own cyber-defenses. Here’s some of what caught Tony’s attention in May 2026:
- Poland’s Internal Security Agency (ABW) has released information about cyber-intrusions into ICS (industrial control systems) at five water treatment facilities in the country in 2024 and 2025. The two main attack vectors – weak passwords and systems exposed directly to the internet – were the same as those used in attacks against the Polish energy sector that leveraged DynoWiper described by ESET researchers here.
- An unknown group recently exfiltrated troves of data from the government of Mexico in what has been described as one of the world’s first truly AI-directed attacks, but the subsequent attack against a water utility plant failed to bridge the gap from IT to OT systems,
- Google has identified what it believes is the first zero-day exploit developed using AI
- Americans lost more than $388 million last year to scams using cryptocurrency kiosks, according to the FBI.
What are some key mitigation steps against attacks targeting OT systems? How do scams crypto ATMs work and how to stay safe? Learn this and more in Tony’s video and be sure to check out the April 2026 edition of Tony’s monthly security news roundup for more insights.
