- CISA warned of rising cyberattacks on US water systems, targeting 100+ exposed PLCs in July 2026
- Attacks caused password changes, IP reassignments, boil water notices, and manual operations
- Attribution uncertain, but reports suggest Iranian group; CISA urges removing PLCs from internet
CISA has warned of a “significant increase” in cyberattacks targeting US water systems, urging organizations to implement mitigations, strengthen their security posture, and make sure they’re resilient against these attempts.