Major Warning Issued About Attacks on US Water Supply
Multiple security agencies in the United States are warning regarding an active cyber threat from foreign hackers using AI tools to infiltrate American infrastructure, threatening the water supply.
Multiple security agencies in the United States are warning regarding an active cyber threat from foreign hackers using AI tools to infiltrate American infrastructure, threatening the water supply.
Article outline
- What happened
- Why it matters
- The bottom line
Key points
- See more of our trusted coverage when you search.to see more of our trusted coverage when you search.
- The infrastructure being targeted includes energy, water, wastewater, chemical, and commercial facilities, according to the advisory.
- This is not a theoretical risk-it is an active threat.
Newsweek is a Trust Project member.
In a report published Wednesday by Cybersecurity and Infrastructure Security Agency (CISA), the agency cautioned that owners and operators of control systems that apply Siemens S7 Series programmable logic controllers (PLCs) are vulnerable to attack.
"All PLC owners and operators should apply relevant mitigations to reduce the risk to their devices and systems., " the advisory cautioned, adding, "The Siemens-specific content in this advisory should be understood and applied as one subset of the wider threat landscape." Newsweek reached out to Siemens by email Wednesday for comment.
The threat actors are conducting reconnaissance and capability development against U.S.-based Siemens PLC installations using AI-generated exploitation scripts disguised as legitimate monitoring tools, the advisory remarked, noting, that the actors leverage Internet scanning services to find Internet-exposed PLCs running outdated software or that are otherwise poorly protected.
In practice, the infrastructure being targeted includes energy, water, wastewater, chemical, and commercial facilities, according to the advisory.
"This is not a theoretical risk-it is an active threat. Depending on the specific circumstances, exploitation of poorly protected PLCs could lead to disruption of critical industrial processes, safety incidents, downtime or equipment damage, compromise of sensitive data, compliance violations, and cascading impacts throughout interconnected systems, " the advisory read. This is a breaking news story. Updates to come.
For now, major Warning Issued About Attacks on US Water Supply remains the part of the story worth watching, and further updates are likely as more details are confirmed.
