CISA Releases Guidance Urging Water Treatment Facilities to Disconnect Equipment From the Internet

18 days ago by alapakala to c/privacy

CISA released an urgent message warning water utilities to disconnect their logic controllers from the internet in the face of rising cyberattacks.

The hacks target internet-facing programmable logic controllers (PLCs) that control equipment and allow machinery to communicate. They monitor and control the water pressure, chemical dosing, and other factors to ensure the water is safe.

Many of the PLCs are apparently open to the internet and use default credentials, allowing a remote attacker to easily take them over.

I assume it is this CISA: https://en.wikipedia.org/...

far_university1990 7 points 17 days ago

I once went to company to visit science exhibit. When got to future section guide proudly say that powerplant will be connected to internet and no local staff necessary. I ask what happend once it hacked. They say company security will figure out good security protocol. Lol.

Someone need to put actual cyber security people in charge, not CEO without brain.

path: 0 25091768, hotness: undefined, score: 7, children: 1
Malyca 3 points 17 days ago

It's the default passwords for me. If such little care goes into the public water supply, think about how much other shit is painted with a brush of incompetence?

path: 0 25091768 25099242, hotness: undefined, score: 3, children: 0
dregan 5 points 18 days ago

Absolutely should have been that way from the beginning. The fact that enforced Critical Infrastructure Protection standards only apply to power utilities is shocking.

path: 0 25086467, hotness: undefined, score: 5, children: 0
privacy
privacy

@lemmy.dbzer0.com

login for more options
6007
1184
1687

Welcome! This is a community for all those who are interested in protecting their privacy.

Rules

PS: Don't be a smartass and try to game the system, we'll know if you're breaking the rules when we see it!

  1. Be civil and no prejudice
  2. Don't promote big-tech software
  3. No apathy and defeatism for privacy (i.e. "They already have my data, why bother?")
  4. No reposting of news that was already posted
  5. No crypto, blockchain, NFTs
  6. No Xitter links (if absolutely necessary, use xcancel)

Related communities:

Some of these are only vaguely related, but great communities.

go to feed...