#WaterSystems

CISA: Hackers target industrial systems using “unsophisticated methods”

by

September 25, 2024 at 12:27PM CISA warns of threat actors targeting critical infrastructure networks through unsophisticated methods such as brute force attacks and default credentials on Internet-exposed industrial devices. Ongoing attacks are impacting water and wastewater systems. CISA advises applying security measures to defend against malicious activity, following previous warnings of pro-Russian hacktivists targeting water … Read more

EPA Issues Alert After Finding Critical Vulnerabilities in Drinking Water Systems

by

May 21, 2024 at 07:21AM The US EPA issued an enforcement alert on safeguarding drinking water systems from cyber threats. Over 70% of water systems inspected do not comply with the Safe Drinking Water Act and have critical cyber vulnerabilities. Recommendations include reducing internet exposure, regular assessments, changing default passwords, and addressing vulnerabilities. The government … Read more

White House Calls on States to Boost Cybersecurity in Water Sector 

by

March 20, 2024 at 08:03AM The White House has called for a meeting with state agencies to discuss protecting water and wastewater infrastructure from cyber threats. The one-hour virtual meeting on March 21 will focus on US government efforts to enhance cybersecurity, address vulnerabilities, and urge immediate action to safeguard critical infrastructure. The White House … Read more

White House and EPA warn of hackers breaching water systems

by

March 19, 2024 at 06:04PM U.S. National Security Advisor Jake Sullivan and EPA Administrator Michael Regan sent a joint letter to governors warning about cyberattacks targeting the country’s water infrastructure. They seek governors’ support in safeguarding water systems against cyber threats and proposed a Water Sector Cybersecurity Task Force. Recent attacks by Iranian and Chinese … Read more

US Government Issues Guidance on Securing Water Systems

by

February 22, 2024 at 09:15AM The US government released new guidance for water and wastewater sector entities to improve cyber resilience. The document, “Top Cyber Actions for Securing Water Systems,” includes instructions and free resources to assess and enhance security posture. It advises reducing internet exposure, conducting regular assessments, improving password hygiene, inventorying assets, updating … Read more

EPA Withdraws Water Sector Cybersecurity Rules Due to Lawsuits

by

October 16, 2023 at 06:24AM The US Environmental Protection Agency (EPA) has withdrawn cybersecurity rules for public water systems due to lawsuits filed by states and non-profit water associations. The attorney generals of Missouri, Arkansas, and Iowa challenged the requirements, arguing they would burden small towns financially. The American Water Works Association (AWWA) and the … Read more