February 21, 2024 at 01:45PM CISA, the FBI, and the EPA have released a fact sheet outlining top cybersecurity measures for U.S. water utilities. Recommendations include reducing exposure of assets, changing passwords, patching vulnerabilities, and conducting regular cybersecurity training. The agencies also issued a guide and free security scan program to help utilities secure their … Read more
January 24, 2024 at 03:50PM Water and wastewater utilities were given guidance by US Cybersecurity and Infrastructure Security Agency (CISA) to bolster their response to cyberattacks. The guide emphasizes incident response planning, highlights resource constraints for the sector, and examines recent cyber incidents targeting utilities. The water sector faces unique challenges in addressing these cyber … Read more
January 2, 2024 at 05:12PM The Aliquippa water authority in western Pennsylvania fell victim to an international cyberattack by Iranian-backed hackers. The attack targeted a piece of Israeli-made equipment, prompting concerns about potential dangers to water utilities across the US. Efforts to address cybersecurity vulnerabilities and funding challenges continue at the state and federal levels. … Read more
December 6, 2023 at 09:48AM Dragos is providing small US electric, water, and natural gas utilities with complimentary OT cybersecurity software, as part of its Community Defense Program. Takeaway from Meeting Notes: 1. Dragos has initiated a Community Defense Program. 2. The program provides free operational technology (OT) cybersecurity software. 3. Beneficiaries of the program … Read more
October 18, 2023 at 02:02PM The EPA has withdrawn its rules requiring cybersecurity assessments for water utilities due to legal challenges. Experts warn that this leaves the water sector vulnerable to cyberattacks, which could have serious public health and safety consequences. The EPA is now encouraging utilities to voluntarily conduct risk assessments and provide user … Read more