CISA says more than 100 internet-exposed water and wastewater systems were targeted in July, with the attacks linked to Iranian threat actors and aimed at disrupting OT environments. The agency is urging critical infrastructure operators to reduce exposure of PLCs and other ICS devices, especially those reachable through cellular modems or the public internet. #CISA #IranianThreatActors #PLCs #WaterAndWastewaterSystems
Keypoints
- CISA observed attacks on over 100 internet-exposed water systems in July.
- The activity mainly targeted PLCs connected directly to cellular modems.
- The attacks were linked to Iranian threat actors focused on OT disruption.
- CISA advises removing unnecessary internet exposure and securing remote access.
- The guidance stresses protecting PLCs and ICS devices used in critical infrastructure.