November 22, 2024 at 11:53AM Nearly 100 large community water systems in the U.S. possess serious cybersecurity vulnerabilities, risking water supply for 27 million Americans. Despite regulations, financial and resource constraints hinder proper security measures. Cyberattacks from various groups have targeted water systems, emphasizing a critical need for improved investment and security practices in this … Read more
November 19, 2024 at 03:02PM A recent EPA study found that nearly one-third of U.S. drinking water systems have cybersecurity vulnerabilities, affecting approximately 82.7 million people. The agency lacks a tracking system for potential attacks, relies on DHS for incident reporting, and faces ongoing challenges in enhancing cybersecurity amidst aging infrastructure. ### Meeting Takeaways: 1. … Read more
October 7, 2024 at 01:34PM American Water, the largest U.S. water and wastewater utility, experienced a cyberattack prompting system shutdowns. The company hired cybersecurity experts and initiated a joint investigation with law enforcement. The incident led to the closure of its online services and billing paused. The company assured no impact on water facilities. This … Read more
May 21, 2024 at 07:21AM The US EPA issued an enforcement alert on safeguarding drinking water systems from cyber threats. Over 70% of water systems inspected do not comply with the Safe Drinking Water Act and have critical cyber vulnerabilities. Recommendations include reducing internet exposure, regular assessments, changing default passwords, and addressing vulnerabilities. The government … Read more
March 20, 2024 at 02:39PM The US government urges states to improve water sector cybersecurity amid rising threats. The EPA plans to establish a Water Sector Cybersecurity Task Force to address vulnerabilities and adopt best practices. Recent attacks have raised awareness, prompting the EPA to pursue a concerted effort with state officials, backed by the … Read more
March 20, 2024 at 08:03AM The White House has called for a meeting with state agencies to discuss protecting water and wastewater infrastructure from cyber threats. The one-hour virtual meeting on March 21 will focus on US government efforts to enhance cybersecurity, address vulnerabilities, and urge immediate action to safeguard critical infrastructure. The White House … Read more
March 20, 2024 at 02:30AM The EPA has formed a “Water Sector Cybersecurity Task Force” to address cyber threats to water systems. EPA Administrator and the National Security Advisor emphasize the need to secure water and wastewater systems from cyber attacks. CISA has warned of the “urgent risk posed by Volt Typhoon” targeting critical infrastructure. … Read more
February 22, 2024 at 09:15AM The US government released new guidance for water and wastewater sector entities to improve cyber resilience. The document, “Top Cyber Actions for Securing Water Systems,” includes instructions and free resources to assess and enhance security posture. It advises reducing internet exposure, conducting regular assessments, improving password hygiene, inventorying assets, updating … Read more
February 21, 2024 at 01:45PM CISA, the FBI, and the EPA have released a fact sheet outlining top cybersecurity measures for U.S. water utilities. Recommendations include reducing exposure of assets, changing passwords, patching vulnerabilities, and conducting regular cybersecurity training. The agencies also issued a guide and free security scan program to help utilities secure their … Read more
October 18, 2023 at 02:02PM The EPA has withdrawn its rules requiring cybersecurity assessments for water utilities due to legal challenges. Experts warn that this leaves the water sector vulnerable to cyberattacks, which could have serious public health and safety consequences. The EPA is now encouraging utilities to voluntarily conduct risk assessments and provide user … Read more