In most cities, nobody owns the whole network
Former Waco CIO argues cellular-connected water controllers sit outside scanned networks, and accountability plus operating-budget funding—not technology—block segmentation.
Writing as Waco, Texas's former CIO, the author describes July water-sector intrusions that CISA linked to over 100 compromised systems, typically controllers on public cellular links absent from asset lists. The FBI and EPA reported incidents at utilities in at least seven states since July 27, and a Clayton County, Georgia pump station failure triggered a boil-water advisory. He argues accountability and funding—using mechanisms like the Texas Water Development Board's new cybersecurity scoring criteria—are the binding constraints, citing Waco's 43-day segmentation of five treatment plants with operating funds.
- CISA counted 100+ compromised water/wastewater systems in July, typically on cellular modems
- Revised July 22 advisory widened targeting to Schneider Electric and Siemens controllers
- Waco segmented five treatment plants in 43 days using operating funds, no bond
- Texas Drinking Water SRF now awards five priority points for cybersecurity fixes
- FBI and EPA recommend private APNs and tracking SIMs via carrier invoices
- Victims
- WacoClayton County
- Organizations
- WacoCISAFBIEPATexas Water Development Board
- Countries
- United States
From the original article
7 min read at cyberscoop.com
July’s intrusions reached water controllers that sat on a cellular link no city network scan would find. Naming an owner and paying for the fix are decisions a utility can make this fiscal year, out of money it already applies for. The post In most cities, nobody owns the whole network appeared first on CyberScoop.
By Greg Otto · cyberscoop.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.