CISA warns water facilities to secure HMI systems exposed online

CISA and the EPA warned that Internet-exposed Human Machine Interfaces (HMIs) at water and wastewater facilities have been actively exploited, allowing attackers—including pro‑Russia hacktivists and nation‑aligned groups like Volt Typhoon and IRGC‑linked actors—to alter set points, disable alarms, change passwords, and disrupt operations; recent incidents forced utilities to switch to manual operations or shut down systems and prompted federal guidance to harden remote HMI access.