A coordinated attack on Minnesota water systems leads today’s brief, alongside critical OpenWrt flaws, Certighost domain-escalation risk, 38 Apache Traffic Server vulnerabilities, public vBulletin exploit code, and new OT isolation guidance.