Cyber Threats to Water Infrastructure: Insights from Josh Corman

## Executive summary This podcast transcript reviews a sustained campaign of cyber intrusions targeting water utilities across the US, UK, Canada and Europe—attributed in public briefings to a China-linked PLA unit (Volt Typhoon)—highlighting initial-access operations, exposed HMIs and other weak OT/IT hygiene that enable persistence; it profiles the Littleton, MA case and related reports, and describes Undisruptable 27, an engineering-focused initiative to reduce consequence of attacks (prioritizing water services for hospitals) through affordable, practical mitigations and community engagement.