External Attack Surface Discovery

CISA's water-sector answer is an inventory: 100-plus exposed systems, most of them PLCs

July's intrusions into US water utilities did not need an exploit. They needed a PLC on a cellular modem with nothing in front of it, and CISA's August 21 guidance is an inventory job.