CISA Alert: Water Sector PLC Targeting

Censys analyzed a CISA advisory and quantified internet exposure for Rockwell/Allen-Bradley, Siemens, and Schneider Electric PLCs (thousands of hosts), found heavy concentration in U.S. and on cellular carrier ASNs, identified vulnerable product families and co-exposed services (VNC, Telnet, Modbus), pivoted published IOCs to reveal a multi-homed operator workstation and a single-use staging host, and provided immediate mitigations and threat-hunting queries to detect and contain the activity.