The suspected hackers have breached US water infrastucture before – and CISA has just warned their targets are expanding.
In at least one city, the attack temporarily knocked a municipal well and water treatment plant offline, according to local media outlet MPRNews.
Other communities reported the attacks disrupted communications and automated operations, forcing staff to switch to manual workarounds while systems were restored, the news outlet said.
And why are water systems online in the first place?
SCADA control is very important in a modern system, and the ability monitor and control is absolutely required.
Has nothing to do with the internet though.
And if you must, you could do reporting via internet but no control.
There is still no reason for it to be on the internet.
And why do I have the feeling a vendor got involved with pitching the internet…
Dude I was putting industrial control systems behind firewalls 25 years ago, for exactly this very scenario. Which had not happened yet, but even then it was completely obvious to every network engineer that this would happen eventually.
Remotely accessible? Of course. Directly on the public internet with default credentials? Idiots.
Yes,
Guess what you are they mean by “connected to the internet”
Accessible through a secure portal on the internet, totally ok
Just blasting into the internet with no firewall or proper security? Effing idiotic.