Multistate Water System Attacks Widen, Iran Suspected

Multiple US water and wastewater utilities across at least a dozen states have been targeted in a campaign that modifies PLC passwords and network settings to lock out operators and disrupt control and visibility; incidents forced manual workarounds and contributed to a boil-water advisory in Georgia. CISA and FBI advisories highlight the exploitation of Internet-exposed PLCs (vendors noted include Rockwell/Allen Bradley, Schneider Electric, and Siemens), and while some indicators point to pro-Iran hacktivists or IRGC-linked activity, public attribution remains unconfirmed.