Over 100 U.S. Water Systems Targeted in One Month as CISA Sounds Alarm on Exposed PLCs

Over 100 U.S. Water Systems Targeted in One Month as CISA Sounds Alarm on Exposed PLCs

The numbers tell a stark story. In July 2026 alone, the Cybersecurity and Infrastructure Security Agency observed malicious cyber activity against more than 100 internet-exposed systems in the U.S. water and wastewater sector. Most attacks hit programmable logic controllers. These devices sit at the heart of operations that pump, treat and monitor drinking water for millions. But the threat didn’t start or stop in July. Earlier that month, more …

CISA confirms hackers targeted over 100 US water systems during July

U.S. cybersecurity agency CISA said it has observed cyberattacks targeting over 100 internet-exposed systems across the U.S. water and wastewater sector, amid a wave of hacks targeting American critical infrastructure. The number of affected systems provides new context to the scale of the ongoing cyberattacks targeting water providers in Michigan, Minnesota, and at least five […] The post CISA confirms hackers targeted over 100 US water systems…

ThreatsDay: 296K IoT Botnet, 100+ Water Systems Targeted, SharePoint RCE Chain + 27 New Stories

A fake login page. A fake security scan. A fake productivity app. Apparently, pretending to be useful is still one of the easier ways into a machine. The rest of the week gets stranger: botnets borrowing AI, command traffic hiding in public infrastructure, malicious tools waiting before showing their real behavior, exposed systems getting scanned, and exploit windows shrinking again. Different

More Than 100 Water Systems Were Hit In July Cyberattacks

CISA says more than 100 internet-exposed U.S. water and wastewater systems were targeted in July, often through programmable logic controllers connected directly to cellular modems. "That's the first time the feds have put a number on the digital intrusions, but they have yet to attribute the campai...