Infrastructure · Sep 1, 2026Iran-Linked Hackers Hit 100 Water Systems; Rockets Strike German Grid

KEMETIC MINDS
Infrastructure Watch — Daily Update — September 01, 2026

---

Today’s briefing covers two active fronts: CISA says a coordinated cyber attack by suspected Iranian hackers affected over 100 water systems (CPO Magazine, 2026), and homemade rockets packed with explosives hit a substation near Germany’s Jänschwalde coal plant (The Sun, 2026). New research also highlights a surprising structural weak point in power grids (Tech Xplore, 2026).

• CISA assessed that a coordinated cyber attack by suspected Iranian hackers affected over 100 water systems (CPO Magazine, 2026).
• Homemade rockets packed with explosives struck the Turnow-Preilack substation near Germany’s Jänschwalde coal plant, damaging multiple power lines (The Sun, 2026; Israel Hayom, 2026).
• Authorities confirmed an attempted attack at the substation, and bomb disposal teams defused several devices (The Sun, 2026).
• The suspected aim was a large-scale outage at the Jänschwalde plant, but no such outage occurred (Israel Hayom, 2026).
• New University of New Mexico research finds that less-connected agents, not hubs, can make power grids most vulnerable to intruder attacks (Tech Xplore, 2026).
• German police have yet to confirm the rocket attack, and no perpetrator has been named (Israel Hayom, 2026).

---

1. Water Supply: Suspected Iranian Hackers Hit 100+ Systems

CISA has identified a coordinated cyber attack by suspected Iranian hackers that affected over 100 water systems, according to CPO Magazine’s report, published Tuesday, September 1 (CPO Magazine, 2026).

The agency describes the intrusion as a coordinated attack (CPO Magazine, 2026).

Details beyond the scope of the campaign — how access was gained, which utilities were hit, and what was disrupted — are not specified in the reporting available today (CPO Magazine, 2026).

---

2. Power Supply: Explosive Rockets and a New Grid Vulnerability Study

Rockets hit a substation in Brandenburg. Emergency crews found “homemade rockets packed with explosives” at the Turnow-Preilack substation near the Jänschwalde coal-fired power plant, which The Irish Sun describes as Germany’s fourth largest power hub (The Sun, 2026; Israel Hayom, 2026). Multiple power lines were damaged in the barrage (The Sun, 2026).

Reports claim the facility came under fire several times and took multiple hits (The Sun, 2026). A separate MSN account says the installation was repeatedly targeted, with emergency crews later finding and defusing the rockets (MSN, 2026).

Authorities confirmed an attempted attack at the substation, and police said damage to a power line was first discovered at 8 a.m. (The Sun, 2026). The suspected aim was to cause a blackout at the nearby Jänschwalde coal plant; no such outage occurred (The Sun, 2026; Israel Hayom, 2026).

The incident comes weeks after explosive-laden drones were found at Leipzig airport (The Sun, 2026). German police have yet to confirm the reported rocket attack, though a police spokeswoman told broadcaster n-tv that several improvised explosive and incendiary devices were found (Israel Hayom, 2026).

New research on grid weak links. Engineers at The University of New Mexico asked a pointed question: if you wanted to take down a power grid, which part of the system should you attack (Tech Xplore, 2026)?

Their answer, published in Nature Communications under the title “Extreme vulnerability to intruder attacks destabilizes network dynamics,” upends earlier work that focused on network hubs: agents with the fewest incoming connections can make a cyber-physical network more vulnerable overall (Tech Xplore, 2026).

In an “intruder attack,” a node’s physical component remains intact but its cyber component is compromised (Tech Xplore, 2026). The team, led by UNM mechanical engineering professor Francesco Sorrentino and recent Ph.D. Amirhossein Nazerian, included researchers from K. N. Toosi University of Technology, Florida State University, UNM and City College of New York (Tech Xplore, 2026).

---

What’s Disputed or Unconfirmed

Key elements of today’s top story remain unconfirmed. German police have not confirmed the reported rocket attack, and the available reporting identifies no suspect; authorities have confirmed only that an attempted attack occurred (Israel Hayom, 2026; The Sun, 2026).

The Israel Hayom headline frames the Jänschwalde incident amid “suspected Russian sabotage,” but the article text available to Infrastructure Watch does not name who is suspected or cite evidence of Russian involvement (Israel Hayom, 2026). MSN similarly calls the event a “suspected deliberate attack” (MSN, 2026).

On water systems, the “suspected Iranian hackers” characterization is CISA’s assessment as reported by CPO Magazine; the available text does not include the underlying technical evidence, and the operational impact on the affected systems has not been detailed (CPO Magazine, 2026).

---

🛡️ Free Preparedness Guides

Two free, printable checklists you can download and keep on hand — one for water-supply
disruptions, one for power outages.

---

References

1. CPO Magazine. (2026, September 1). CISA: A Coordinated Cyber Attack by Suspected Iranian Hackers Affected Over 100 Water Systems. cpomagazine.com
2. Tech Xplore. (2026, August 31). New analysis reveals unexpected vulnerabilities in power grids and other cyber-physical networks. techxplore.com
3. Thesun. (2026, August 31). Rockets ‘packed with explosives’ fired at German power depot weeks after airport drone plot. thesun.ie
4. Israelhayom. (2026, August 31). Explosive devices found near German power plant amid suspected Russian sabotage. israelhayom.com
5. MSN. (2026, September 1). Rockets fired at substation in Brandenburg in suspected deliberate attack. msn.com

---