EPA Alert Warns Nation’s Drinking Water at Risk: SecurityScorecard’s recommendations for securing critical infrastructure

EPA, CISA, and FBI warn of escalating cyber threats to U.S. water and wastewater systems amid widespread noncompliance with security requirements, citing recent nation-state activity (e.g., Iran-linked Cyber Av3ngers and China’s Volt Typhoon). The advisory urges immediate improvements in basic cyber hygiene, asset inventories, incident response planning, backups, and vulnerability management, and notes proposed CIRCIA rules mandating rapid reporting of cyber incidents and ransomware payments to improve visibility and resilience across critical infrastructure.