Vendors and CVEs › Sectors › Water and wastewater
Water and wastewater: industrial cyber security news for the sector
16 stories in Industrial Cyber Brief name Water and wastewater, from Sunday 18 October 2026 to Wednesday 11 November 2026. Newest first; each links the full story with who is affected and what to do.
The stories
High
Report says hackers are targeting European infrastructure systems
A CBS News headline reports that high-tech hackers are targeting infrastructure systems in Europe. The report gives no further detail on who is behind it, which systems or which organisations.
Low
Six-month US pilot offers water utilities free help fixing security gaps
Project Watershed 250 launched in San Antonio on 31 August 2026.
Low
IIT students build AI tool to defend water supply from hackers
India Today reports that students at the Indian Institutes of Technology (IIT) have developed an AI-based answer to hackers threatening water supply. The report describes no specific flaw or attack.
High
Handala hacktivist group threatens Israeli water and power sites
The Jerusalem Post reports that the hacktivist group Handala has threatened Israel's water and power sites. The report gives no detail on methods, targets or any attack.
High
Iranian hackers claim attacks on US water systems
Iranian hackers claim they attacked US water systems. Minnesota systems are reported to have gone offline. The report gives no confirmation that the claim is true and no technical details.
Medium
State utility regulators put water system cyber attacks on their agenda
State utility regulators have placed cyber attacks against water systems on their agenda, according to a VitalLaw.com headline dated 6 November 2026. The report gives no further detail.
Medium
Two New Jersey municipal water systems targeted in cyber attacks
Headlines report that two New Jersey municipal water systems were targeted in cyber attacks. Related headlines say at least 12 states face attacks on water systems, and that Trump blamed Minnesota's governor, not Iran.
High
Report claims UK cyber attack disrupted banks, power and water
A tabloid headline says a UK cyber attack caused banks, power and water to fail in its first 72 hours.
Medium
Australia's 2026 risk review names AI as growing threat to infrastructure
Australia's Critical Infrastructure Security Centre released its fourth annual risk review.
Low
Crytica Security signs US public sector distribution deal with Carahsoft
Crytica Security and Carahsoft announced a partnership.
Low
CISA launches November campaign on infrastructure resilience and recovery
CISA began its 2026 Critical Infrastructure Security and Resilience Month, themed 'Resolve to be Resilient'.
High
Warlock ransomware group hit a water utility, likely through SharePoint
Researchers reported on 1 October that the China-linked group behind Warlock ransomware attacked at least four organisations in two months, including a water utility and a telecoms provider.
Low
Experts say AI could help novices attack utilities and plants
Security experts say AI does not yet turn novices into nation-state attackers, but the potential is there. They say it speeds up research on documentation, reconnaissance and ways to exploit automation controllers.
High
Moxa AIG-302 ThingsPro Edge flaws could expose sensitive data
Moxa AIG-302 ThingsPro Edge firmware up to 1.4.0 has two flaws: missing authorisation and a hard-coded cryptographic key. One lets a privileged attacker with adjacent network access read sensitive data, including keys.
Medium
MITRE ATT&CK version 20 adds more industrial and critical infrastructure threats
MITRE released version 20 of its ATT&CK framework.
High
Six flaws found in CISA's Malcolm network analysis software
Six flaws affect Malcolm, including authentication bypass, incorrect authorisation, server-side request forgery (SSRF), cross-site request forgery (CSRF) and data amplification. Rated 8.1 on CVSS v3.