This Week in Cyber - August 6–12, 2026
Welcome to CrunchAtlas’s first weekly roundup!
Each week, we’ll pull out a few developments worth paying attention to: attacks, policy changes, federal action, and other shifts that could affect how teams defend and operate their environments.
No giant vulnerability or exploit dump. Just what happened, what changed, and why it matters.
Senate bill would set baseline cyber standards for water systems
On August 10, Senators Adam Schiff and Amy Klobuchar introduced the Water Cyber Shield Act following the recent attacks on U.S. water and wastewater systems.
The bill would have EPA set baseline cyber standards and establish assessments against them. States that assume primary enforcement would run those assessments, with EPA responsible where a state doesn't. Violations found during an assessment would have to be corrected, with enforcement available if they aren't.
The proposal would also authorize $300 million a year from 2027 through 2032 for drinking water systems, plus another $300 million a year for wastewater. Funding would prioritize systems short on staff, expertise, or resources.
Community drinking water systems serving more than 3,300 people already complete Risk and Resilience Assessments and Emergency Response Plans, with cyber risk already part of that process. Today, utilities certify completion to EPA and keep the actual documents themselves.
The bill would change that for the cyber portions. Those sections would be submitted during assessments and reviewed against a federal baseline.
Why it matters: A completed assessment would no longer be the end of the process. Identified gaps could be reviewed against a defined standard and would have to be addressed.
A city cyberattack disrupted 911 and municipal services
On August 7, Suisun City, California was hit by malicious software that affected 911 routing, police and fire dispatch, records, and other city services. Officials shut down the city’s IT network to contain the incident and preserve evidence.
Emergency calls were routed through the Solano County Dispatch Center while Suisun police and fire continued responding. The city declared a local emergency on August 8.
By August 10, City Hall remained closed. In-person and online services across several departments, including planning, housing, finance, and public works, were suspended. The police lobby remained open for some services.
No disruption to water treatment or delivery was reported. Suisun City handles local water billing and service requests, while the Suisun-Solano Water Authority and Solano Irrigation District provide water delivery, treatment, and field service.
Why it matters: Emergency response kept running because calls could be rerouted. The same question applies across critical infrastructure: if a system you depend on is unavailable for two days, what's the alternate path?
White House opens federal cyber operations to vetted U.S. companies
On August 12, the White House created a program that would let vetted U.S. companies help the federal government monitor and disrupt infrastructure used by foreign cybercrime groups.
Companies wouldn't be allowed to act on their own. They would have to work under contract with the Justice Department or Homeland Security, and receive written federal approval before carrying out an operation. The government now has 60 days to set the rules for how companies are selected, targets are approved, and operations are coordinated.
The memorandum also allows participating companies to use threat information collected by other private firms to help identify targets and propose operations. Creating a more direct path from commercial threat intelligence to government action.
Why it matters: Private-sector threat intelligence has long helped identify attackers and support investigations. This program creates a path for that same intelligence to be used in offensive operations against the infrastructure behind a campaign.
That’s it for this week.
We’ll be back next Thursday with the next Weekly Round-up!
Sources:
https://www.schiff.senate.gov/wp-content/uploads/2026/08/Bill-Text_Water-Cyber-Shield-Act.pdf
https://www.epa.gov/waterresilience/awia-section-2013
https://www.sfchronicle.com/bayarea/article/cyberattack-suisun-city-22380837.php
https://www.sfgate.com/bayarea/article/malware-attack-suisun-city-22381963.php
