Industrial Control System Security

Attackers changed water plant PLC passwords and IP addresses to lock operators out, CISA says

Gizmodo counts dozens of US water treatment plants attacked since February. The security consortium director it interviewed says the connection itself matters less than what the utility does with the data coming back off the controller.