The FBI and EPA warned that internet-exposed PLCs at water and wastewater utilities in at least seven states have been attacked, causing operational disruptions such as pressure loss, flooding, and manual fallback. The incidents show how weak defenses, old equipment, and shared configurations leave critical systems vulnerable, and why utilities must urgently secure remote access, passwords, and OT monitoring. #FBI #EPA #PLCs #Aliquippa #Pennsylvania
Keypoints
- Internet-facing PLCs at water utilities were targeted across at least seven states.
- Some attacks caused pressure loss, flooding, and manual operation of systems.
- The attackers used exposed controllers and weak access controls, not advanced exploits.
- Shared vulnerable configurations from third-party integrators widened the impact.
- Utilities should remove public access, strengthen passwords, and monitor OT environments continuously.
Read More: https://cyberscoop.com/water-utility-cyberattacks-prevention-nozomi-networks-ceo-op-ed/