Skip to content
OriginalSign in
Image: SecurityWeek

SecurityWeekMike Lennon

CISA urges utilities to secure PLCs after Minnesota attack

Part of the Minnesota story · since 29 Jul

Quiet for 11 weekslast report 11 Aug9 articles5 outlets
29 Jul · SecurityWeek first15 Sep1 Oct17 OctNowThis article5th of 9
  • Wed 29 Jul, 08:12 UTC. SecurityWeek, first report. Dozens of Minnesota Water Utilities Targeted in Coordinated OT Attacks.
  • Wed 29 Jul, 14:40 UTC. The Hacker News, its first report on the story. Cyberattack hits Minnesota water systems, one plant taken offline.
  • Wed 29 Jul, 19:50 UTC. Security Affairs, its first report on the story. Hackers Strike Minnesota Water Utilities, One Plant Briefly Offline.
  • Thu 30 Jul, 22:02 UTC. Dark Reading, its first report on the story. Minnesota Water Utility Attacks Expose Sector's Cyber-Risks.
  • Thu 30 Jul, 22:31 UTC. SecurityWeek. CISA urges utilities to secure PLCs after Minnesota attack. This article, 5th of 9.
  • Fri 31 Jul, 15:31 UTC. SecurityWeek. Cyberattacks on Minnesota Water Systems Investigated as Officials Warn About Iranian Hackers.
  • Sun 2 Aug, 09:01 UTC. Security Affairs. CISA urges removal of online PLCs after Minnesota water attacks.
  • Mon 3 Aug, 09:11 UTC. SecurityWeek. Iranian hackers hit water plants in seven states, safety assured.
  • Tue 11 Aug, 18:56 UTC. DataBreaches, its first report on the story. Judge Approves Data Rules for Change Healthcare Breach Deal.

The Cybersecurity and Infrastructure Security Agency (CISA) is urging water and wastewater system operators to secure operational technology against cyber threats, especially targeting programmable logic controllers (PLCs). This call follows a coordinated attack that disrupted numerous water utilities in Minnesota, highlighting an increase in attempts by threat actors to compromise PLCs. CISA recommends removing exposed PLCs from the internet and implementing strict access controls.

The recent attacks are suspected to relate to Iran-linked hacker groups, with concerns raised about vulnerabilities in critical infrastructure devices. CISA urges operators to take immediate protective measures, including enhancing password security and verifying external connections.

How the story developed

All 9 articles
Quiet for 11 weekslast report 11 Aug9 articles5 outlets

9 articles from 5 outlets since 29 Jul. Quiet since 11 Aug. This was the 5th report, 2 days after the first.

Now29 Jul31234567891012First reportSecurityWeek · 29 Jul, 08:12This article5th of 9 · day 1Picked up againafter 8 days quiet
  • Wed 29 Jul, 08:12 UTC. SecurityWeek, first report. Dozens of Minnesota Water Utilities Targeted in Coordinated OT Attacks.
  • Wed 29 Jul, 14:40 UTC. The Hacker News, its first report on the story. Cyberattack hits Minnesota water systems, one plant taken offline.
  • Wed 29 Jul, 19:50 UTC. Security Affairs, its first report on the story. Hackers Strike Minnesota Water Utilities, One Plant Briefly Offline.
  • Thu 30 Jul, 22:02 UTC. Dark Reading, its first report on the story. Minnesota Water Utility Attacks Expose Sector's Cyber-Risks.
  • Thu 30 Jul, 22:31 UTC. SecurityWeek. CISA urges utilities to secure PLCs after Minnesota attack. This article, 5th of 9.
  • Fri 31 Jul, 15:31 UTC. SecurityWeek. Cyberattacks on Minnesota Water Systems Investigated as Officials Warn About Iranian Hackers.
  • Sun 2 Aug, 09:01 UTC. Security Affairs. CISA urges removal of online PLCs after Minnesota water attacks.
  • Mon 3 Aug, 09:11 UTC. SecurityWeek. Iranian hackers hit water plants in seven states, safety assured.
  • Tue 11 Aug, 18:56 UTC. DataBreaches, its first report on the story. Judge Approves Data Rules for Change Healthcare Breach Deal.
  • No CVE
  • Larger: an outlet’s first report
  • Coverage over time
  • Quiet time, folded
Show all 9 articles as a list
  1. Wed 29 JulDay 03
    1. Dozens of Minnesota Water Utilities Targeted in Coordinated OT Attacks08:12 · SecurityWeek · First report
    2. Cyberattack hits Minnesota water systems, one plant taken offline14:40 · The Hacker News
    3. Hackers Strike Minnesota Water Utilities, One Plant Briefly Offline19:50 · Security Affairs
  2. Thu 30 JulDay 12
    1. Minnesota Water Utility Attacks Expose Sector's Cyber-Risks22:02 · Dark Reading
    2. CISA urges utilities to secure PLCs after Minnesota attack22:31 · SecurityWeek · This article, 5th of 9
  3. Fri 31 JulDay 21
    1. Cyberattacks on Minnesota Water Systems Investigated as Officials Warn About Iranian Hackers15:31 · SecurityWeek

  4. Quiet for 2 days

    Sun 2 AugDay 41
    1. CISA urges removal of online PLCs after Minnesota water attacks09:01 · Security Affairs
  5. Mon 3 AugDay 51
    1. Iranian hackers hit water plants in seven states, safety assured09:11 · SecurityWeek

  6. Quiet for 8 days

    Tue 11 AugDay 131
    1. Judge Approves Data Rules for Change Healthcare Breach Deal18:56 · DataBreaches · Picked up again

Sources

CyberSIXTSignal over noise
Updated AboutDevelopersSign in