Aug 26, 2026 · 10 min
Iran-linked hackers take UK power facility offline
Iranian hackers darken UK power plant, ShinyHunters breaches the threat hunters, Zombie Visa cards
The episode connects a real-world disruption to broader weaknesses in social engineering, ransomware claims, collaboration tools, and payment security.
- 1An Iran-linked attack temporarily disrupted a small UK power generator, underscoring cyber risks to critical infrastructure.
- 2ShinyHunters targeted cybersecurity firm ReliaQuest, while LockBit made an unsubstantiated claim against U.S. Bancorp.
- 3Expired Visa cards may still support contactless payments through a relay attack, challenging assumptions about card expiration.
Don't miss
The episode highlights research suggesting some expired Visa cards can still enable contactless payments through a relay attack.
The brief
David Shipley opens with confirmation that Iran Nexus hackers were linked to an attack that temporarily took a small UK power generator offline.
The incident puts cyber risk to critical infrastructure beside ShinyHunters’ social-engineering attempt against ReliaQuest, showing how attackers target both systems and people.
The roundup also weighs LockBit’s unsubstantiated claim against U.S. Bancorp and Microsoft Teams’ new policy to block bots.
The most counterintuitive finding concerns expired Visa cards: researchers showed some may still enable contactless payments through a relay attack.
Together, the stories show how cybersecurity failures can arise from physical infrastructure, trusted communications, criminal claims, and payment assumptions.