Skip to content
NewA calmer, faster ZeroHour
IndustryinfoExploited in the wild

In most cities, nobody owns the whole network

CyberScoopby Greg Otto ()7 min read2 · 1 read
AI summary · glm-5.3-flashSummaries by Vani AI

Former Waco CIO argues cellular-connected water controllers sit outside scanned networks, and accountability plus operating-budget funding—not technology—block segmentation.

Writing as Waco, Texas's former CIO, the author describes July water-sector intrusions that CISA linked to over 100 compromised systems, typically controllers on public cellular links absent from asset lists. The FBI and EPA reported incidents at utilities in at least seven states since July 27, and a Clayton County, Georgia pump station failure triggered a boil-water advisory. He argues accountability and funding—using mechanisms like the Texas Water Development Board's new cybersecurity scoring criteria—are the binding constraints, citing Waco's 43-day segmentation of five treatment plants with operating funds.

Key facts
  • CISA counted 100+ compromised water/wastewater systems in July, typically on cellular modems
  • Revised July 22 advisory widened targeting to Schneider Electric and Siemens controllers
  • Waco segmented five treatment plants in 43 days using operating funds, no bond
  • Texas Drinking Water SRF now awards five priority points for cybersecurity fixes
  • FBI and EPA recommend private APNs and tracking SIMs via carrier invoices
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

From the original article

7 min read at cyberscoop.com

July’s intrusions reached water controllers that sat on a cellular link no city network scan would find. Naming an owner and paying for the fix are decisions a utility can make this fiscal year, out of money it already applies for. The post In most cities, nobody owns the whole network appeared first on CyberScoop.

CyberScoop

By Greg Otto · cyberscoop.com

Read the full article at CyberScoop

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.