On September 25, 2024, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued an alert that there has been additional pro-Russia Hacktivist Activity at water systems using the same techniques as earlier attacks.
Source: New Mexico Environment Department
On September 25, 2024, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued an alert that there has been additional pro-Russia Hacktivist Activity at water systems using the same techniques as earlier attacks.
CISA continues to respond to active exploitation of internet-accessible operational technology (OT) and industrial control systems (ICS) devices, including those in the Water and Wastewater Systems (WWS) Sector. Exposed and vulnerable OT/ICS systems may allow cyber threat actors to use default credentials, conduct brute force attacks, or use other unsophisticated methods to access these devices and cause harm.
CISA urges OT/ICS operators in critical infrastructure sectors to apply the recommendations listed in Defending OT Operations Against Ongoing Pro-Russia Hacktivist Activity to defend against this activity. To learn more about secure by design principles and practices, visit CISA’s Secure by Design webpage. For more information and guidance on protection against the most common and impactful threats, tactics, techniques, and procedures, visit CISA’s Cross-Sector Cybersecurity Performance Goals.
The alert is available at: https://www.cisa.gov/news-events/alerts/2024/09/25/threat-actors-continue-exploit-otics-through-unsophisticated-means.
