CISA Urges Critical Infrastructure to Secure PLC Devices Amid Increased Cyberattacks on Water Sector

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent advisory for critical infrastructure owners and operators to remove publicly exposed programmable logic controllers (PLCs) and other operational technology (OT) from the internet. This follows a significant increase in cyber threat actors targeting PLC devices in the water and wastewater sector, with incidents including password modifications to lock out operators and changes to IP addresses to disconnect PLCs.