The Cybersecurity and Infrastructure Security Agency (CISA), Federal Bureau of Investigation (FBI), Environmental Protection Agency (EPA), and other U.S. government partners recently published an update to a joint Cybersecurity Advisory regarding cyber activity targeting internet-connected operational technology devices, including drinking water and wastewater systems. The update provides indicators of compromise, detection guidance, and recommends mitigation measures to protect against Iran-based cyberattacks. Kudos to Col. George Bivens’ State Police Criminal Intel Center bulletins sharing this information and alerting Pennsylvania facility owners to these threats last week. 

CISA works closely with government and industry partners to provide information to assist critical infrastructure owners and operators to strengthen security and resilience. CISA recommends taking proactive steps to improve your cyber resilience against these threats, including:  

• Assess your current state 

• Mitigate risk 

• Report malicious activity 

• Connect with your cybersecurity advisers 

• Stay informed 

For more information on cybersecurity advisories, visit Nation-State Cyber Threats.