Critical Infrastructure Attribution

CISA logs attacks on more than 100 internet-exposed US water systems in one month

CISA says attackers reached programmable logic controllers over the internet during July 2026, changed IP addresses and passwords, and left some utilities unable to monitor their own equipment. No actor has been named.