CISA Urges Water and Wastewater Systems Sector to Protect OT Against Activity Targeting PLCs
Summary
CISA has observed an increase in cyberattacks targeting programmable logic controllers (PLCs) within the Water and Wastewater Systems sector. Threat actors are altering PLC passwords and IP addresses, leading to operational disruptions such as boil water notices. CISA urges critical infrastructure operators to disconnect exposed PLCs from the internet and implement stronger security measures.
IFF Assessment
This article details ongoing cyberattacks that are disrupting critical infrastructure, posing a direct threat to public safety and essential services.
Defender Context
Defenders in the industrial control systems (ICS) and operational technology (OT) space must be vigilant against threats targeting PLCs, especially those exposed to the internet. The CISA alert highlights the need for robust network segmentation, strong authentication, and diligent inventory management of all connected devices, including potentially undocumented cellular modems.