Ethical Hacking News
The recent surge in cyberattacks on US water systems has raised concerns about the nation's cybersecurity posture, particularly with regards to the internet connectivity of water system controllers. With at least 12 US states' water systems having been targeted by suspected Iranian cyberattacks, retired General Paul Nakasone emphasizes the need for higher standards in cybersecurity and calls for partnerships between government agencies, academia, and private sector security experts to defend these critical infrastructure against attacks.
The recent surge in cyberattacks on US water systems has raised concerns about the nation's cybersecurity posture. The FBI has confirmed that at least 12 US states' water systems have been targeted by suspected Iranian cyberattacks. Retired General Paul Nakasone emphasizes the need for higher standards in cybersecurity and partnerships to defend critical infrastructure against attacks. The vulnerability of US water systems to cyberattacks poses significant challenges for cybersecurity efforts due to underfunding and limited IT staff. Nakasone suspects an Iranian actor is behind the recent cyberattacks, but the US must take a measured approach to attribution. Defending US water systems requires a concerted effort from multiple stakeholders with improved cybersecurity posture and collaboration among government agencies, academia, and private sector organizations.
The recent surge in cyberattacks on US water systems has raised concerns about the nation's cybersecurity posture, particularly with regards to the internet connectivity of water system controllers. According to retired General and former NSA chief Paul Nakasone, these PLCs should not be connected to the internet. The FBI has confirmed that at least 12 US states' water systems have been targeted by suspected Iranian cyberattacks, which may be linked to the malicious activities of "Iran-linked crews" monitoring sensor data like tank levels and controlling pumps.
Nakasone emphasized the need for higher standards in cybersecurity and highlighted the importance of partnerships in defending these critical infrastructure against attacks. He pointed to DEF CON Franklin, a project launched two years ago that has been helping water facilities secure their systems with the help of hackers volunteering their time and talent. Nakasone also mentioned his work on Project Chimera, a cybersecurity platform being developed by academics and cybersecurity practitioners using open-source technologies.
The ex-NSA chief noted that defending these water systems requires a more involved approach than current methods, involving partnerships between government agencies, academia, and private sector security experts. He also expressed concern about the vulnerability of US water systems to cyberattacks, given their historical underfunding and limited IT staff. The sheer scale of the attack surface poses significant challenges for cybersecurity efforts.
Nakasone observed that Iran has a history of targeting water facilities' PLCs in earlier attacks, and while neither the FBI nor the Trump administration has officially blamed Iran, the ex-NSA chief suspects an Iranian actor is behind the recent cyberattacks. He stated that the US must take a measured approach to attribution but highlighted the intent and capability of Iranian actors. The stakes are high, with Nakasone emphasizing that defending these water systems requires a concerted effort from multiple stakeholders.
The vulnerability of US water systems to cyberattacks has significant implications for national security and public health. In response to this emerging threat, cybersecurity experts and policymakers must prioritize the development of effective countermeasures and strengthen partnerships across government agencies, academia, and private sector organizations.
The recent surge in cyberattacks on US water systems serves as a stark reminder of the need for improved cybersecurity posture and collaboration among stakeholders. As Nakasone noted, defending these critical infrastructure against attacks requires a more involved approach than current methods, involving partnerships between government agencies, academia, and private sector security experts. The stakes are high, with significant implications for national security and public health.
Related Information:
https://www.ethicalhackingnews.com/articles/The-Internet-Incompatibility-of-Water-System-Controllers-A-Call-for-Cybersecurity-Vigilance-Amidst-Suspected-Iranian-Attacks-ehn.shtml
https://www.theregister.com/security/2026/08/07/water-system-controllers-dont-belong-on-the-internet-says-ex-nsa-chief-after-suspected-iran-attacks/5285070
Published: Fri Aug 7 16:39:37 2026 by llama3.2 3B Q4_K_M
