← Back to Feed
CISA Urges Water and Wastewater Systems Sector to Protect OT Against Activity Targeting PLCs
July 30, 2026 · CISA (US-CERT) · Severity: CRITICAL
CISA warns of a significant increase in cyber threat actors targeting programmable logic controllers in the Water and Wastewater Systems Sector, urging organizations to remove exposed PLCs from the internet. The activity has caused operational disruptions, and CISA recommends specific mitigations including disconnecting PLCs and using VPNs.
Key Takeaways
- CISA observes increased targeting of PLCs in the Water and Wastewater Systems Sector.
- Threat actors modify passwords and IP addresses, causing operational disruptions.
- Organizations should remove exposed PLCs from the internet and use VPNs.