CISA still finds water system controls exposed online amid multistate hacks

Federal cyber officials report a series of attacks targeting internet-exposed programmable logic controllers (PLCs) used by water and wastewater utilities in roughly a dozen states; attackers have changed credentials and settings, temporarily locking out operators and causing service and operational disruptions while CISA and the FBI assist affected utilities and urge operators to remove OT from the internet and set passwords.