CISA is warning that internet-exposed PLCs in water and wastewater systems are being increasingly targeted, with recent attacks disrupting more than 30 Minnesota community water systems. The agency says attackers have changed passwords, altered IP settings, and exploited exposed OT assets, while advising organizations to remove direct internet exposure and secure access through VPNs or gateways. #CISA #Minnesota #RockwellAutomation #AllenBradley #Siemens #SchneiderElectric #MicroLogix1400
Keypoints
- CISA warns of rising attacks on internet-exposed PLCs in water and wastewater systems.
- More than 30 Minnesota community water systems were disrupted in coordinated attacks.
- Hackers changed passwords and modified IP addresses to lock operators out.
- CISA urges removing public OT exposure or protecting it with VPNs and gateways.
- Censys reports thousands of exposed Rockwell, Siemens, and Schneider Electric hosts online.