Iran hits water utilities, LoadMaster's KEV deadline, WordPress's XSS2Shell

Plus: an 18-year-old Linux kernel bug and 200 compromised Swiss government accounts