Public Water Systems Are Targeted by State Actors: How to Protect PLCs and HMIs in the Operational Technology Network

The post reports coordinated cyberattacks that targeted more than 30 community water systems in Minnesota and additional incidents across several U.S. states, where attackers remotely accessed internet-exposed HMIs and PLCs, changed IP addresses and passwords, and disrupted wastewater monitoring and control; the activity is being investigated for possible Iranian-backed (CyberAv3ngers) involvement, and the author recommends Zero Trust microsegmentation and related OT controls to prevent lateral movement and increase cyber resilience.