Institute for Security and Technology

Water utilities in at least seven states have reported cyberattacks to the FBI, where hackers remotely accessed internet-connected devices and changed settings or passwords. Cybersecurity experts warn these attacks weaken operational control over critical infrastructure like water systems. Some recent incidents have resulted in real-world impacts, such as loss of water pressure or shutting down well controls.

The White House has updated federal cybersecurity logging rules, replacing a 2021 memo with a new directive emphasizing a risk-based approach to reduce operational inefficiencies. The new memo, M-26-14, tasks the Cybersecurity and Infrastructure Security Agency (CISA) with developing a logging reference architecture and sets timelines for agency compliance. Experts have expressed mixed reactions, citing both the benefits of flexibility and concerns about implementation gaps.