Inside the North American Water Utility Hacking Crisis

Inside the North American Water Utility Hacking Crisis: Iran Links, PLC Tactics, Insurance Fallout, and Volunteer Fixes   This special Cybersecurity Today episode examines the expanding wave of water utility intrusions across North America, including a WIRED-obtained memo linking attacks on Minnesota systems to Iran and a joint FBI/EPA alert reporting activity in at least seven U.S. states targeting internet-exposed Rockwell MicroLogix PLCs by rewriting configurations, altering passwords, and manipulating project files, with effects like loss of pressure, flooding, and tampered operator displays.   It also covers a separate Quebec incident in Saint-Noël shared by "Z Pen Test Alliance," where attackers adjusted chlorine settings and the plant entered safe mode without contamination.   The show reviews competing attributions (Cyber Avengers vs. Hondala), procurement and triage challenges for small utilities, an insurance war game simulating a mass water-sector crisis, concerns about uninsurability and act-of-war exclusions, and the DEF CON Franklin volunteer program helping rural utilities implement basics like password resets, MFA, and incident response plans.

00:00 Sponsor NordLayer 00:37 Deep Dive Setup 01:25 Iran Linked Water Hacks 02:27 Attack Mechanics Impact 03:38 Who Did It 04:13 Canadian Utility Breach 04:54 BSides Lessons Learned 05:51 Insurance War Game 07:59 Uninsurable Risk Fixes 09:00 DEF CON Franklin Volunteers 10:11 Franklin Findings Challenges 11:24 Local Sharing Next Steps 11:55 Wrap Up Listener Notes 12:46 Sponsor NordLayer Again

Read the original article:

Inside the North American Water Utility Hacking Crisis