Iran-Linked Cyberattacks Target Over 100 U.S. Water Systems in July

A recent report reveals that over 100 U.S. water and wastewater systems were targeted by cyberattacks in July, with suspicions pointing toward Iran-linked actors. The attacks exploited internet-exposed programmable logic controllers (PLCs) connected to cellular modems, affecting utilities across at least a dozen states. Experts warn this highlights systemic vulnerabilities in operational technology (OT) infrastructure, which was originally designed for closed environments. Matt Hartman of the Merlin Group emphasized that the scale of the attacks indicates a broader threat to critical infrastructure. While only 0.5% of U.S. water utilities were impacted, analysts fear these incidents are test runs for larger-scale attacks. The use of AI-generated exploitation scripts against Siemens S7 PLCs underscores growing risks to sectors like energy and public services. CISA has urged improved cybersecurity measures, but many small-town utilities struggle with funding for advanced protections. The incident also raises questions about geopolitical tensions, with some suggesting it may be retaliation for past cyber operations like Stuxnet.