Good day. The cyberattack on infrastructure tech giant Itron went further than previously thought, according to securities filings from the company. Itron, which develops technology for heavy industries like energy and water plants, as well as smart-city developers, said that the hackers breached a “limited” number of systems hosted by their clients.

The company didn’t specify the extent of the intrusion or the customers involved, but experts said this is yet another example of how a company’s security is only as good as that of its suppliers. My colleague, Angus Loten, has the full story here.

Also today:

• UAE says Iran hackers using artificial intelligence to scale attacks.
• DHS report criticizes cellphone security.
• Allies issues agentic AI guidance.

DHS Flags Smartphones as Growing Cybersecurity Risk. A Department of Homeland Security watchdog report found employees were failing to follow basic mobile security practices, including using unauthorized apps and not properly securing government-issued devices. The inspector general warned that the lapses increase the risk of compromise of sensitive information. (United Press International)

West Virginia County Restores Systems After Cybersecurity Incident. Harrison County, W.V., said government systems are back online after an April cyberattack forced disruptions to services and internal operations. Officials said the county worked with external cybersecurity experts to investigate and restore systems while continuing to monitor for potential impacts. (WBOY)

SDCCD Network Disrupted by Cyberattack Attempt. The San Diego Community College District said its campus network and websites were taken offline after a failed cyberattack attempt over the weekend. Officials said systems were shut down as a precaution and are being restored while investigators assess whether any data was compromised. (San Diego City Times)

The WSJ Pro Cybersecurity team is Deputy Bureau Chief Kim S. Nash and reporters Angus Loten, and James Rundle. Follow us on X @WSJCyber. Reach the team by replying to any newsletter you receive or by emailing Kim at kim.nash@wsj.com.