SpyCloud found 1,787 of roughly 10,000 US water organizations exposed, including one infected device holding logins for 167 utility tenants.
Two small Colorado water providers found control settings changed and alarms silenced.
CISA counts over 100 internet-exposed water systems targeted in July and urges utilities to shrink their attack surface.
DEF CON Franklin and NRWA launch Water Watch Center to bring managed detection and response to small water utilities.
A coordinated cyberattack targeted operational technology systems at more than 30 community water utilities across Minnesota.
Nation state actors exploit default credentials and internet facing PLCs to access water infrastructure, altering chemical dosing and opening floodgates…