A few weeks ago, I wrote that AWIA was never enough to address the cybersecurity risks facing U.S. water utilities. Since then, we’ve gotten another reminder of why. In late July, the FBI and EPA warned that attackers had targeted internet-facing PLCs at water and wastewater utilities across multiple states, in some cases causing operational… Read more »

The cyberattacks against water utilities reported over the past week have generated a familiar response. Questions about attribution. Discussions about foreign adversaries. Renewed calls for additional funding. And, inevitably, renewed conversations about compliance. Those conversations miss the point. Whether these attacks ultimately trace back to Iranian actors or another threat group is important for national… Read more »

Over the past several weeks, the cyberattack against Coca-Cola’s Fairlife dairy business has continued to evolve. On July 16, Coca-Cola disclosed that Fairlife had experienced a ransomware event involving unauthorized access to a portion of its systems, including production-related systems, prompting the company to temporarily suspend U.S. production. Days later, ransomware group Anubis claimed responsibility… Read more »