Researchers fear a second, deadlier round of attacks with the Triton/Trisis ICS malware used against Saudi petrochemical targets late last summer.

Iran shows continued activity in spearphishing targets in Asia and the Middle East. The threat group Temp.Zagros, more often known as MuddyWater (no connection with the similarly named hedge investment firm), has stepped up its distribution of malicious Word documents. Palo Alto Networks, FireEye, and Trend Micro are all tracking the group.

CTS Labs, discoverers of vulnerabilities in AMD chipsets that may or may not be serious, defends its controversial disclosure, but admit they might have done a better job getting independent verification of their research. They don't address the other concern observers have raised: short-sellers at Viceroy Research Group received a copy of the vulnerability research. They released a report on AMD the same day CTS Labs issued its findings, and in that report predicted that AMD's value would essentially go to zero.

NATO has placed itself firmly behind the UK in its nerve agent dispute with Russia. TASS is authorized to state that "sources" tell it NATO's Article 5 won't be invoked, presumably because the chemical attack was too small and too ambiguous.

The US Administration also issued sanctions yesterday in reprisal for both NotPetya and 2016 election meddling.

Yesterday FBI and Department of Homeland Security analysis resulted in US-CERT issuing a Joint Technical Alert warning of Russian government intrusion into US Government and energy sector networks. The campaign is said to involve preparation for ICS attacks.