Chris Sistrunk and Stephanie Kiel detail the critical issues facing the water sector, and actionable steps that OT operators can take to secure infrastructure.

A new SpyCloud study found that nearly 18% of U.S. water and wastewater organizations have identity data actively exposed by infostealers, with one infected vendor device exposing logins tied to about 167 utility metering tenants. The report warns that stolen credentials can enable cascading supply chain exposure and provide attackers with legitimate access paths into corporate email, VPNs, and operational technology systems. #SpyCloud #CISA #EnvironmentalProtectionAgency

Water sector cybersecurity is critical as cyberattacks threaten public safety and infrastructure, especially at outdated facilities.

YouTube video by Mayor Bryan Kennedy, Ph.D.

🏗️ New mWater Feature Announcement: The Water Supply Planning Tool! A new way for you to plan scenarios for expanding your water systems. Learn more here:…

Protect your water utility from cyber threats. Natsar provides expert, compliant, and practical cybersecurity solutions for public water and wastewater systems.

The report from the regional Alliance for the Great Lakes warned states risk overtaxing water supplies if they rush to woo the computing facilities without closely studying whether aquifers and water ...

The Texas Water Development Board approved $3 billion for 17 water projects, including a major reservoir expansion. Corpus Christi also received funding for a seawater desalination plant to address water scarcity concerns in South Texas. Other cities and…

Recent cyberattacks on U.S. water utilities have raised alarms about national security and critical infrastructure vulnerabilities. Over a dozen states reported breaches affecting more than 30 communities, with Minnesota being the first to disclose incidents in mid-July. The attacks, allegedly linked to Iranian hackers, targeted internet-connected devices in water systems, exploiting weaknesses in cybersecurity defenses. While some systems were temporarily disabled, causing localized disruptions like water supply interruptions and boil-water advisories, experts warn of broader implications. The U.S. government has not officially attributed the attacks to Iran, though intelligence agencies are confident about its involvement. This marks a significant escalation from previous isolated incidents, with potential psychological impacts on public trust in essential services. Cybersecurity firms have identified thousands of exposed controllers in water systems, highlighting systemic risks. The situation underscores the need for improved defenses against state-sponsored cyber threats targeting critical infrastructure.

In late July, a series of cyberattacks targeted water and wastewater utilities in the United States, prompting the FBI, EPA, and CISA to issue a joint advisory. The advisory describes the activity, identifies the methods used, and provides recommendations for the sector. Experts note that the attacks targeted operational and administrative systems on which the […] Post Cyberattacks Hit U.S. Water Systems: Experts Identify the Key Problem at Root-Nation.com.

The FBI and EPA warned that cyberattacks against internet-facing PLCs have hit water and wastewater utilities in at least seven states, causing operational disruptions like pressure loss, flooding, and manual fallback. The attacks relied on exposed, outdated controllers and weak access controls, highlighting the need for utilities to remove PLCs from the public internet, strengthen passwords, and monitor OT environments continuously. #FBI #EPA #PLC #Aliquippa

Hackers accessed Coweta County water controls July 27, but service and water quality were unaffected as operators shifted to manual control.