CISA Urges Water and Wastewater Systems Sector to Protect OT Against Activity Targeting PLCs

CISA reports active exploitation of multiple vulnerabilities added to its Known Exploited Vulnerabilities catalog and warns that threat actors are targeting internet-exposed programmable logic controllers in the Water and Wastewater Systems sector. Recommended actions include removing direct PLC internet exposure, using VPNs or gateways, changing default passwords, restricting access by IP allowlists, and maintaining clean PLC backups. The breadth of actively exploited vulnerabilities and potential for operational or physical impacts warrants urgent remediation and investigation.