For awareness Medium Check exposure in your normal cycle
Two New Jersey municipal water systems targeted in cyber attacks
ABC News - Breaking News, Latest News and Videos (via Google News)water
What happened. Headlines report that two New Jersey municipal water systems were targeted in cyber attacks. Related headlines say at least 12 states face attacks on water systems, and that Trump blamed Minnesota's governor, not Iran. No method or operational impact is given.
Who is affected. Two New Jersey municipal water systems are named. Related headlines mention at least 12 states and Minnesota's water systems. The source does not say which other organisations are affected.
What to do. Check whether your water control systems or remote-access paths are reachable from the internet, and brief your operations team on the reports.
When to act. For awareness: no sign it reaches your site
Editor's reading
Forasset ownerOT security leadleadership
- Purdue level
- L3.5
- L2
Why: The report names targeted municipal water systems but no component, so control systems (L2) and the remote-access paths into them (L3.5) are the likely places to check.
- Are you exposed?
Review your inventory for internet-facing HMIs, SCADA servers and remote-access gateways serving water treatment or distribution.
- If you cannot fix it yet
- Remove direct internet access to HMIs and SCADA systems.
- Require multi-factor authentication on all remote-access paths into water control systems.
- Confirm operators can run the plant manually if control systems must be isolated.
- Watch for
- Logons to HMI or SCADA hosts from unexpected external addresses or from the IT network.
- Unplanned changes to setpoints, alarms or control logic on water treatment systems.
Inferred from the facts above, not stated by the source. Check it against your own site before acting.
Source: ABC News - Breaking News, Latest News and Videos (via Google News) (opens news.google.com)
More on Water and wastewater