The suspected hackers have breached US water infrastucture before – and CISA has just warned their targets are expanding.
In at least one city, the attack temporarily knocked a municipal well and water treatment plant offline, according to local media outlet MPRNews.
Other communities reported the attacks disrupted communications and automated operations, forcing staff to switch to manual workarounds while systems were restored, the news outlet said.
Dude I was putting industrial control systems behind firewalls 25 years ago, for exactly this very scenario. Which had not happened yet, but even then it was completely obvious to every network engineer that this would happen eventually.
Remotely accessible? Of course. Directly on the public internet with default credentials? Idiots.
Yes,
Guess what you are they mean by “connected to the internet”
Accessible through a secure portal on the internet, totally ok
Just blasting into the internet with no firewall or proper security? Effing idiotic.