462
CISA Releases Guidance Urging Water Treatment Facilities to Disconnect Equipment From the Internet (www.privacyguides.org)
submitted 3 months ago by to c/technology@lemmy.world
64 comments fedilink hide all child comments
 

CISA released an urgent message warning water utilities to disconnect their logic controllers from the internet in the face of rising cyberattacks.

The hacks target internet-facing programmable logic controllers (PLCs) that control equipment and allow machinery to communicate. They monitor and control the water pressure, chemical dosing, and other factors to ensure the water is safe.

Many of the PLCs are apparently open to the internet and use default credentials, allowing a remote attacker to easily take them over.

I assume it is this CISA: https://en.wikipedia.org/wiki/Cybersecurity_and_Infrastructure_Security_Agency

you are viewing a single comment's thread
view the rest of the comments
[–] 1 point 3 months ago

So are we just kind of admitting that there exists no way to expose any networked device to the internet securely?

It's done all the time. It's not a product you can buy, though, it's a process. There's probably a good "go by" for how to start the process for citywide infrastructure, but it's just one more document for people to ignore.

  • permalink
  • fedilink
  • source
  • parent