Read more: industrialcyber.co
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a cybersecurity alert highlighting ongoing cyber threats targeting operational technology (OT) devices, particularly in water and wastewater systems. The alert emphasizes the critical need to safeguard OT assets and prioritize fundamental cybersecurity protocols, including changing default credentials, ensuring network segmentation, and mitigating internet exposure. The alert specifically mentions pro-Russia hacktivist groups, including the People’s Cyber Army (PCA), which have been targeting water utilities in North America and Europe. These hacktivist groups have been using vulnerabilities in VNC protocols to access HMI systems and exploit SCADAView CSX, a SCADA software widely used in water utilities. CISA recommends that organizations implement robust cybersecurity measures, including threat intelligence, vulnerability assessments, and incident response plans, to protect their OT infrastructure from these growing threats. Operational technology (OT) is a critical component of industrial control systems and is used to manage physical processes in various sectors, including water utilities, power plants, and manufacturing facilities.