ShinyHunters seizes Clop’s leak site, CARBONATO botnet hunts AI keys on Docker hosts, and infostealer exposure in the US water sector.