CISA Urges Water and Wastewater Systems Sector to Protect OT Against Activity Targeting PLCs

**CISA Alert:** CISA is observing a significant increase in threat actors targeting internet-exposed PLCs in the Water and Wastewater Systems sector—actors have changed PLC passwords and IPs, causing disconnections, manual operations, and boil-water notices; the alert urges removing OT/PLCs from the internet, using secure remote access (VPN/gateway), enabling/rotating passwords, allowlisting IPs, maintaining clean PLC backups, and provides vendor and reporting resources.