🟠 High | Source: The Register — Security
Cyberattacks on water treatment and distribution systems have expanded to Georgia and Michigan, with attribution pointing to an Iran-linked threat group amid ongoing US-Iran geopolitical tensions. The attacks follow a pattern of targeting operational technology (OT) in critical national infrastructure. Political disagreement over attribution is complicating the public response, with the Trump administration deflecting blame rather than confirming state-sponsored involvement.
Security Architect’s Take: Organisations operating or supporting OT/ICS environments — including cloud-connected SCADA and industrial control systems — should urgently audit remote access paths, enforce MFA on all internet-facing management interfaces, and review network segmentation between IT and OT layers. If your organisation provides cloud services to utilities or CNI operators, ensure your shared responsibility boundaries and incident response playbooks are current.
Original advisory: Water system cyberattacks spread to Georgia, Michigan amid US-Iran conflict