Volunteer DEF CON hackers dive into America’s leaky water infrastructure

November 24, 2024 at 10:33AM The Franklin project, launched at DEF CON, enlists hackers to enhance cybersecurity for six US water companies, addressing critical vulnerabilities. In partnership with the University of Chicago and the NRWA, volunteers will assess and improve security systems, aiming to bolster resilience against cyber threats targeting America’s critical infrastructure. **Meeting Takeaways: … Read more

Kansas water plant cyberattack forces switch to manual operations

September 24, 2024 at 03:57PM Arkansas City, Kansas, faced a cyberattack on its water treatment facility, prompting manual operations while authorities investigate. City officials reassured residents that the water supply remains secure and operational. The incident coincided with a warning about Russian-linked threat actors targeting the U.S. water sector, reflecting ongoing cybersecurity challenges in the … Read more

Despite cyberattacks, water security standards remain a pipe dream

September 7, 2024 at 08:44AM Multiple cybersecurity incidents involving water systems in the US, attributed to China, Russia, and Iran, prompt concerns about the vulnerabilities in the water infrastructure. Legacy operational technology (OT) systems, remote cyberattacks, and lack of cybersecurity standards pose significant risks. Attempts to enforce minimum standards have faced legal challenges, leading to … Read more

Kremlin’s Sandworm blamed for cyberattacks on US, European water utilities

April 17, 2024 at 04:04PM The notorious Russian military cyber unit, Sandworm, linked to GRU intelligence, engaged in cyberattacks on US and European water and hydroelectric utilities, causing disruptions and a water tank overflow. The group has targeted Ukraine and also impacted US and European critical infrastructure. Mandiant warned of the ongoing threat posed by … Read more

White House Calls on States to Boost Cybersecurity in Water Sector 

March 20, 2024 at 08:03AM The White House has called for a meeting with state agencies to discuss protecting water and wastewater infrastructure from cyber threats. The one-hour virtual meeting on March 21 will focus on US government efforts to enhance cybersecurity, address vulnerabilities, and urge immediate action to safeguard critical infrastructure. The White House … Read more

White House and EPA warn of hackers breaching water systems

March 19, 2024 at 06:04PM U.S. National Security Advisor Jake Sullivan and EPA Administrator Michael Regan sent a joint letter to governors warning about cyberattacks targeting the country’s water infrastructure. They seek governors’ support in safeguarding water systems against cyber threats and proposed a Water Sector Cybersecurity Task Force. Recent attacks by Iranian and Chinese … Read more

Major US, UK Water Companies Hit by Ransomware

January 24, 2024 at 06:18AM Veolia North America and Southern Water were both hit by ransomware attacks resulting in data breaches. Veolia assures its water operations weren’t affected, but personal data may have been compromised. Southern Water is investigating a ransomware group’s claim of stealing personal information and documents. The water sector has seen increased … Read more

US Gov Publishes Cybersecurity Guidance for Water and Wastewater Utilities

January 19, 2024 at 06:54AM The US government released new guidance for the water and wastewater sector to improve cyber resilience and incident response capabilities. The document, developed by CISA, the FBI, and the EPA, outlines federal roles and resources, encourages incident reporting, and emphasizes interaction with local cyber communities. It aims to mitigate escalating … Read more

Cyberattack on Pennsylvania Water Authority Disrupts OT Gear

November 29, 2023 at 05:36PM The Aliquippa Municipal Water Authority in Pittsburgh experienced a cyberattack by the Iranian-backed Cyber Av3ngers, targeting an Israeli-affiliated system and disrupting water pressure monitoring. Operations resumed manually; the water supply remains safe. The U.S. government is investigating, amid concerns about critical infrastructure cybersecurity and the need for proactive defense. Meeting … Read more