PLCs
Coverage of PLCs in the Nexus archive.
- The water sector just got it’s wake-up call. Again.
The FBI and EPA issued a joint alert concerning cyberattacks against programmable logic controllers (PLCs) at water and wastewater utilities in multiple states. These attacks successfully exploited exposed, often outdated equipment, leading to operational degradations such as pressure loss and systems reverting to manual control. Experts note that preventative measures are cost-effective, requiring securing remote access through gateways and implementing strong passwords.
- CISA warns of spike in attacks on water systems as Minnesota incidents probed
CISA issued a public alert warning of increased cyberattacks on water systems and advised removing exposed PLCs and operational technology from the internet. The alert follows investigations into incidents in Minnesota.
- Iranian Threat Actors Disrupt US Critical Infrastructure Via Exposed PLCs
Iranian threat actors disrupted U.S. critical infrastructure by compromising exposed PLCs, leading to operational disruptions, financial losses, and data manipulation across multiple sectors. The attack highlights vulnerabilities in internet-facing OT devices.