December 13, 2024 at 02:36PM CISA and the EPA have issued a warning to water facilities to protect Internet-exposed Human Machine Interfaces (HMIs) from potential cyberattacks, emphasizing the importance of security measures to safeguard these critical systems. **Meeting Takeaways:** 1. **Warning Issued**: CISA and the EPA have issued a warning regarding the security of water … Read more
December 10, 2024 at 06:29AM Microsoft has introduced enhanced security measures to combat NTLM relay attacks on Exchange servers, including enabling Extended Protection for Authentication (EPA) and channel binding by default. These changes aim to safeguard accounts from exploitation via vulnerabilities, ensuring a more secure environment as the company plans to phase out NTLM usage … Read more
November 22, 2024 at 11:53AM Nearly 100 large community water systems in the U.S. possess serious cybersecurity vulnerabilities, risking water supply for 27 million Americans. Despite regulations, financial and resource constraints hinder proper security measures. Cyberattacks from various groups have targeted water systems, emphasizing a critical need for improved investment and security practices in this … Read more
November 19, 2024 at 03:02PM A recent EPA study found that nearly one-third of U.S. drinking water systems have cybersecurity vulnerabilities, affecting approximately 82.7 million people. The agency lacks a tracking system for potential attacks, relies on DHS for incident reporting, and faces ongoing challenges in enhancing cybersecurity amidst aging infrastructure. ### Meeting Takeaways: 1. … Read more
October 7, 2024 at 01:34PM American Water, the largest U.S. water and wastewater utility, experienced a cyberattack prompting system shutdowns. The company hired cybersecurity experts and initiated a joint investigation with law enforcement. The incident led to the closure of its online services and billing paused. The company assured no impact on water facilities. This … Read more
May 21, 2024 at 07:21AM The US EPA issued an enforcement alert on safeguarding drinking water systems from cyber threats. Over 70% of water systems inspected do not comply with the Safe Drinking Water Act and have critical cyber vulnerabilities. Recommendations include reducing internet exposure, regular assessments, changing default passwords, and addressing vulnerabilities. The government … Read more
March 20, 2024 at 02:39PM The US government urges states to improve water sector cybersecurity amid rising threats. The EPA plans to establish a Water Sector Cybersecurity Task Force to address vulnerabilities and adopt best practices. Recent attacks have raised awareness, prompting the EPA to pursue a concerted effort with state officials, backed by the … Read more
March 20, 2024 at 08:03AM The White House has called for a meeting with state agencies to discuss protecting water and wastewater infrastructure from cyber threats. The one-hour virtual meeting on March 21 will focus on US government efforts to enhance cybersecurity, address vulnerabilities, and urge immediate action to safeguard critical infrastructure. The White House … Read more
March 20, 2024 at 02:30AM The EPA has formed a “Water Sector Cybersecurity Task Force” to address cyber threats to water systems. EPA Administrator and the National Security Advisor emphasize the need to secure water and wastewater systems from cyber attacks. CISA has warned of the “urgent risk posed by Volt Typhoon” targeting critical infrastructure. … Read more
February 22, 2024 at 09:15AM The US government released new guidance for water and wastewater sector entities to improve cyber resilience. The document, “Top Cyber Actions for Securing Water Systems,” includes instructions and free resources to assess and enhance security posture. It advises reducing internet exposure, conducting regular assessments, improving password hygiene, inventorying assets, updating … Read more