schneier
FireEye is releasing much more information about the Triton malware that attacks critical infrastructure. It has been discovered in more places.
This is also a good — but older — article on Triton. We don’t know who wrote it. Initial speculation was Iran; more recent speculation is Russia. Both are still speculations.