--- title: CISA warns of cyberattacks disrupting U.S. water utilities description: CISA has issued an urgent alert warning of a significant increase in cyberattacks targeting internet-exposed programmable logic controllers (PLCs) in water and... canonical: https://daily.dev/posts/cisa-warns-of-cyberattacks-disrupting-u-s-water-utilities-eutq7frju twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: CISA warns of cyberattacks disrupting U.S. water utilities | daily.dev og:description: CISA has issued an urgent alert warning of a significant increase in cyberattacks targeting internet-exposed programmable logic controllers (PLCs) in water and... og:url: https://daily.dev/posts/cisa-warns-of-cyberattacks-disrupting-u-s-water-utilities-eutq7frju og:image: https://api.daily.dev/og/posts/eUTQ7fRJU.png og:image:alt: CISA warns of cyberattacks disrupting U.S. water utilities og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # CISA warns of cyberattacks disrupting U.S. water utilities **[BleepingComputer](https://daily.dev/sources/bleepingcomputer)** · 3 min read · 0 upvotes · 0 comments ## Summary CISA has issued an urgent alert warning of a significant increase in cyberattacks targeting internet-exposed programmable logic controllers (PLCs) in water and wastewater systems. The warning follows a coordinated attack that disrupted more than 30 community water systems in Minnesota, where hackers changed PLC passwords to lock out operators, modified IP addresses, and caused operational disruptions. CISA urges critical infrastructure operators to immediately remove PLCs and other OT devices from direct internet exposure, use VPNs or gateway devices if removal isn't possible, change default passwords, and restrict access via IP allowlists. Cybersecurity firm Censys estimates over 4,100 internet-exposed Rockwell Automation/Allen-Bradley hosts and similar numbers for Siemens and Schneider Electric, with nearly half of exposed Rockwell devices reachable via consumer ISPs and cellular networks — often through undocumented cellular modems. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Critical infrastructure’s long, undefended tail exposed by UK energy attack](https://daily.dev/posts/critical-infrastructure-s-long-undefended-tail-exposed-by-uk-energy-attack-hajfwhwyk) · CSO Online · 0 upvotes · 0 comments - [Siemens S7 PLC threat: What you need to know](https://daily.dev/posts/siemens-s7-plc-threat-what-you-need-to-know-xl3jbv20s) · Tenable Blog · 0 upvotes · 0 comments --- [View this post on daily.dev](https://daily.dev/posts/cisa-warns-of-cyberattacks-disrupting-u-s-water-utilities-eutq7frju) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"CISA warns of cyberattacks disrupting U.S. water utilities","url":"https://daily.dev/posts/cisa-warns-of-cyberattacks-disrupting-u-s-water-utilities-eutq7frju","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/cisa-warns-of-cyberattacks-disrupting-u-s-water-utilities-eutq7frju"},"datePublished":"2026-07-31T16:54:27.618Z","dateModified":"2026-08-04T09:07:29.822Z","description":"CISA has issued an urgent alert warning of a significant increase in cyberattacks targeting internet-exposed programmable logic controllers (PLCs) in water and...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/d31f13d4d466ce75468e154cd7b4dafa?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/d31f13d4d466ce75468e154cd7b4dafa?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"BleepingComputer","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"BleepingComputer","logo":"https://media.daily.dev/image/upload/s--as8nJ3qy--/f_auto,q_auto/v1774959951/logos/bleepingcomputer?_a=BAMAMiWQ0","url":"https://daily.dev/sources/bleepingcomputer"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/cisa-warns-of-cyberattacks-disrupting-u-s-water-utilities-eutq7frju","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"","timeRequired":"PT3M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"BleepingComputer","item":"https://daily.dev/sources/bleepingcomputer"},{"@type":"ListItem","position":3,"name":"CISA warns of cyberattacks disrupting U.S. water utilities"}]} ```