In most cities, nobody owns the whole network
Overview
In July, a series of cyber intrusions targeted water control systems that were connected via cellular links, which typical city network scans would not detect. This situation raises concerns about the security and ownership of critical infrastructure networks, as no single entity appears to fully oversee these systems. Utilities are now faced with decisions regarding ownership and funding for necessary fixes, a challenge compounded by existing fiscal constraints. The implications of these intrusions are significant, as they expose vulnerabilities in essential services that could impact public health and safety. Addressing these issues will require collaboration and investment from local governments and utility companies.
Key Takeaways
- Active Exploitation: This vulnerability is being actively exploited by attackers. Immediate action is recommended.
- Affected Systems: Water control systems, cellular network infrastructure
- Action Required: Utilities need to identify ownership of the affected systems and allocate budget for repairs and security improvements.
- Timeline: Ongoing since July 2023
Original Article Summary
July’s intrusions reached water controllers that sat on a cellular link no city network scan would find. Naming an owner and paying for the fix are decisions a utility can make this fiscal year, out of money it already applies for. The post In most cities, nobody owns the whole network appeared first on CyberScoop.
Impact
Water control systems, cellular network infrastructure
Exploitation Status
This vulnerability is confirmed to be actively exploited by attackers in real-world attacks. Organizations should prioritize patching or implementing workarounds immediately.
Timeline
Ongoing since July 2023
Remediation
Utilities need to identify ownership of the affected systems and allocate budget for repairs and security improvements.
Additional Information
This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.
Related Topics: This incident relates to Critical.