U.S. Security Agencies Warn of Cyberattacks on Siemens Devices in Water Systems
Amid continuing cyberattacks against water systems nationwide, U.S. government security agencies, including CISA, the FBI, and the NSA, have issued a warning about hackers compromising Siemens devices vital to critical infrastructure. The agencies stated on Wednesday that these attacks focus on “all” Siemens S7 programmable logic controllers, which control automated processes in sectors such as energy, water, manufacturing, and agriculture.
CISA described these cyber intrusions as part of a larger trend targeting water supply and wastewater systems across the United States. The agency cautioned that such disruptions could lead to operational downtimes, safety hazards, or even damage to the critical infrastructure dependent on these devices.
According to the security agencies, hackers are utilizing artificial intelligence to craft exploit scripts that leverage publicly accessible information to identify and attack vulnerable programmable logic controllers running outdated software or lacking sufficient security measures. CISA has long advised owners of critical infrastructure to keep these devices off the internet, with officials noting that rural communities are particularly susceptible due to the extensive areas these systems cover.
An incident response expert, speaking to TechCrunch, highlighted the significance of hackers employing AI to pinpoint and target at-risk programmable logic controllers, as well as to study their operational frameworks. However, he warned that these devices are already prone to vulnerabilities.
This warning from CISA follows a surge in cyberattacks attributed to suspected Iranian hackers, which have been targeting U.S. water suppliers and wastewater management services in recent months. The agency noted an escalation in these attacks since the initial targeting of internet-connected systems used for critical infrastructure.
Significant incidents have been reported at water facilities in several states, including Minnesota, Michigan, Arkansas, Georgia, and New Jersey.
