THE report analyzes the increasing targeting of water and wastewater systems by nation-states, driven by their vulnerability and strategic importance. It highlights recent cyber activities linked to Iran, Russia, and China. Iran's attacks focus on public signaling and propaganda, while Russia employs sabotage methods that create fear and disrupt services. China prioritizes strategic reconnaissance and long-term access to critical infrastructure.
The report identifies common vulnerabilities, such as weak credentials and exposed control systems, that make these utilities attractive targets. It concludes that the near-term risk involves low-complexity cyber intrusions leading to local disruptions, rather than massive cyberattacks, with broader implications for public health and trust in government.