Privacy@lemmy.dbzer0.combyalapakala@quokk.au
20 hours

CISA Releases Guidance Urging Water Treatment Facilities to Disconnect Equipment From the Internet

www.privacyguides.org English

CISA released an urgent message warning water utilities to disconnect their logic controllers from the internet in the face of rising cyberattacks.

The hacks target internet-facing programmable logic controllers (PLCs) that control equipment and allow machinery to communicate. They monitor and control the water pressure, chemical dosing, and other factors to ensure the water is safe.

Many of the PLCs are apparently open to the internet and use default credentials, allowing a remote attacker to easily take them over.

I assume it is this CISA: https://en.wikipedia.org/wiki/Cybersecurity_and_Infrastructure_Security_Agency

6
    CISA released an urgent message warning water utilities to disconnect their logic controllers from the internet in the face of rising cyberattacks.
    • far_university1990@reddthat.com
      2 hours

      I once went to company to visit science exhibit. When got to future section guide proudly say that powerplant will be connected to internet and no local staff necessary. I ask what happend once it hacked. They say company security will figure out good security protocol. Lol.

      Someone need to put actual cyber security people in charge, not CEO without brain.

    • dregan@lemmy.world
      9 hours

      Absolutely should have been that way from the beginning. The fact that enforced Critical Infrastructure Protection standards only apply to power utilities is shocking.

    • lemmysmash@beehaw.org
      19 hours

      WHY ON EARTH WAS IT FUCKING CONNECTED TO THE INTERNET IN THE FIRST PLACE?!!

      • lazynooblet@lazysoci.alEnglish
        13 hours

        With default credentials. Jesus Christ almighty. It’s willful negligence.

        • alapakala@quokk.auEnglish
          14 hours

          Even we both know this is💩: they can install internet inaccessible MANs directly to Jim and Bob’s homes, with full lockdown hardware firewalls. If the cables get interrupted, they can investigate what twists got intercepted.