The FBI, NSA, Department of Energy, and CISA released a joint advisory warning that Iranian state-backed hackers are breaking into industrial control systems at US water and energy providers, according to TechCrunch. The attackers are targeting internet-exposed operational networks and programmable logic controllers. Affected equipment includes products from Rockwell, Schneider Electric, and Siemens.
This crosses the line from IT breach to physical threat. When hackers tamper with the screens and controllers running pumps, water treatment, or power grids, a town loses water pressure or a utility is forced to shut down critical infrastructure. Operational technology was never built to survive the open internet.
The real test: do operators pull industrial controls offline and lock down remote access before this advisory becomes an outage list? The fact that federal agencies named multiple vendors suggests the problem is exposure itself, not a single vendor flaw. Defenders should assume any internet-connected operational system is at risk.
This keeps happening because too much critical infrastructure treats convenience as a security model. Put a controller online, layer on remote access, postpone the retrofit, and eventually a foreign government gets a hand on equipment built to keep water flowing, not to survive life on the open internet. The blunt lesson is old and expensive: if a utility can run from anywhere, it can be hit from anywhere.
Filed to the Technology desk · Jul 23