Operational Technology

A coordinated cyberattack targeting operational technology disrupted water systems in at least seven U.S. states, including Minnesota. The attack, which affected over 30 community water systems, caused temporary outages and required manual operations, though no water use advisories were issued. The FBI confirmed the incident, and investigators suspect Iranian hackers were responsible.

CISA issued a public alert warning of increased cyberattacks on water systems and advised removing exposed PLCs and operational technology from the internet. The alert follows investigations into incidents in Minnesota.

The world's first AI-driven cyberattack was unable to breach Operational Technology systems due to a SCADA login screen. The attack is considered the most sophisticated AI-integrated campaign to date. It was successfully defended against.

Dragos analysts dismissed ZionSiphon, a purported AI-generated malware targeting Israeli water infrastructure, as 'hype' due to its dysfunctional code and lack of operational technology expertise. The malware, identified by Darktrace, contains AI-generated errors and fictional configurations, rendering it inoperable despite its politically themed messaging.

ZionSiphon, a new operational technology malware, targets water treatment and desalination systems to disrupt their operations. It is designed to sabotage critical infrastructure, raising concerns about cybersecurity in essential services.

The US government warns programmable logic controllers are being targeted in cyber conflicts, with research identifying 179 vulnerable operational technology devices. Industrial controllers remain at risk as cyber threats escalate in the operational technology sector.