0
0
On Tuesday, the Biden administration issued a warning to the nation’s governors regarding the vulnerability of drinking water and wastewater utilities to cyberattacks orchestrated by hostile foreign nations. The administration highlighted instances where critical plant operations were compromised due to such attacks, posing a significant threat to the provision of essential services and the financial burden on affected communities.
Hacking Incidents
The letter referenced two recent cyber threats faced by water utilities, both attributed to groups supported by adversarial foreign governments. In one case, hackers reportedly affiliated with Iran used a default administrator password to disrupt operations at a water facility, leading to operational issues. Another incident involved a group linked to the Chinese government, named Volt Typhoon, and its sustained presence within the networks of critical infrastructure organizations, hinting at potential disruption during a crisis or conflict with the US.
- Iran-backed hackers targeted water facilities with default passwords.
- Chinese-backed group Volt Typhoon maintained network footholds in critical infrastructure.
Cybersecurity Measures
Sullivan and Regan emphasized the attractiveness of drinking water and wastewater systems as targets for cyberattacks due to their critical role in infrastructure, coupled with limited resources and technical expertise for robust cybersecurity practices. They stressed the importance of basic security protocols such as password resets and software updates, offering a list of recommended actions by CISA and guidance from the EPA.
- Reset default passwords and update software regularly.
- Access recommended actions by CISA and EPA guidance for cybersecurity.
The administration urged water facilities to enhance their cybersecurity posture and announced plans to convene a meeting for state secretaries to discuss bolstering critical infrastructure security in the water sector. Additionally, the EPA is establishing a Water Sector Cybersecurity Task Force to identify vulnerabilities within water systems, marking a proactive approach to mitigate cyber risks and safeguard essential services.
Conclusion
In conclusion, the Biden administration’s proactive stance on addressing cyber threats to water systems underscores the seriousness of the issue and the collaborative efforts required to enhance cybersecurity measures in critical infrastructure sectors. By engaging with state leaders and establishing dedicated task forces, the administration aims to fortify the resilience of water utilities and deter future cyber intrusions, demonstrating a commitment to safeguarding national security interests.
Image/Photo credit: source url
