conv.

All stories
SecurityQuiet 30h · day 3

Colorado Water Utilities Hit by Foreign Cyberattacks on Control Systems

Hackers altered equipment settings and disabled alarms at two small Colorado water utilities in late August; disruptions were brief and caused no service impact.

newest coverage 1d agosummary written 1d ago4 pieces NewswiresMastodon

What to know

  • Two Colorado water utilities serving fewer than 200 people were targeted by foreign actors in late August; attackers altered equipment settings, disabled alarms and remote access, and changed pumping cycles.
  • The governor's office suspects Iranian-backed actors but has not confirmed Colorado was part of the broader campaign that hit at least a dozen states in July; no service disruption or public safety impact occurred.
  • CISA is aware of 100 internet-exposed water systems targeted in cyberattacks nationally, and has urged the water sector to secure operational technology systems.

Colorado Governor Jared Polis State officialCybersecurity and Infrastructure Security Agency (CISA) Federal cybersecurity agencyInfracritical Independent security group

Colorado Water Utilities Hit by Foreign Cyberattacks on Control Systems
securityweek.com

How it unfolded 1 development · click the chart to see its coverage articlesposts

Peak 1 piece in one hour at Sep 21, 5 AM; 4 pieces over 3 days (1 article · 3 posts) Sep 21, 5 AM — 1 piece · 1 article — Newswires 1Sep 21, 6 AM — quietSep 21, 7 AM — quietSep 21, 8 AM — quietSep 21, 9 AM — quietSep 21, 10 AM — 1 piece · 1 post — Mastodon 1Sep 21, 11 AM — quietSep 21, 12 PM — quietSep 21, 1 PM — quietSep 21, 2 PM — quietSep 21, 3 PM — quietSep 21, 4 PM — quietSep 21, 5 PM — quietSep 21, 6 PM — 1 piece · 1 post — Mastodon 1Sep 21, 7 PM — quietSep 21, 8 PM — quietSep 21, 9 PM — quietSep 21, 10 PM — quietSep 21, 11 PM — quietSep 22, 12 AM — quietSep 22, 1 AM — quietSep 22, 2 AM — quietSep 22, 3 AM — quietSep 22, 4 AM — quietSep 22, 5 AM — quietSep 22, 6 AM — quietSep 22, 7 AM — quietSep 22, 8 AM — quietSep 22, 9 AM — quietSep 22, 10 AM — quietSep 22, 11 AM — quietSep 22, 12 PM — quietSep 22, 1 PM — quietSep 22, 2 PM — quietSep 22, 3 PM — quietSep 22, 4 PM — quietSep 22, 5 PM — quietSep 22, 6 PM — quietSep 22, 7 PM — 1 piece · 1 post — Mastodon 1Sep 22, 8 PM — quietSep 22, 9 PM — quietSep 22, 10 PM — quietSep 22, 11 PM — quietYesterday, 12 AM — quietYesterday, 1 AM — quietYesterday, 2 AM — quietYesterday, 3 AM — quietYesterday, 4 AM — quietYesterday, 5 AM — quietYesterday, 6 AM — quietYesterday, 7 AM — quietYesterday, 8 AM — quietYesterday, 9 AM — quietYesterday, 10 AM — quietYesterday, 11 AM — quietYesterday, 12 PM — quietYesterday, 1 PM — quietYesterday, 2 PM — quietYesterday, 3 PM — quietYesterday, 4 PM — quietYesterday, 5 PM — quietYesterday, 6 PM — quietYesterday, 7 PM — quietYesterday, 8 PM — quietYesterday, 9 PM — quietYesterday, 10 PM — quietYesterday, 11 PM — quietToday, 12 AM — quietToday, 1 AM — quiet 1
Sep 22yesterdaynow · 2:56 AM ET
  1. 1

    SecurityWeek reports Colorado attack; governor's office cites Iranian-backed concern

    SecurityWeek publicly reported the Colorado cyberattacks. The governor's office stated it cannot confirm which foreign actors were involved but is aware of ongoing Iranian-backed efforts across the nation to access drinking water and wastewater systems, per CISA.

    “We cannot confirm what foreign actors may have been involved, but we are aware of ongoing efforts across the nation by an Iranian-backed group to access drinking water and wastewater systems, as per the Cybersecurity and Infrastructure Security Agency.”
    — Colorado Governor's office spokesperson
    1. 1 outlet Colorado Water Utilities Hit by Cyberattacks Targeting OT Systems

      first by SecurityWeek, 2d ago

    • patrickcmiller@infosec.exchange

      Colorado water utilities face foreign cyberattacks targeting pumps, alarms and remote access https:// industrialcyber.co/utilities-e nergy-power-water-waste/colorado-water-utilities-face-foreign-cyberattacks-targeting-pumps-alarms-and-remote-access/

      patrickcmiller@infosec.exchangeMastodon1d agoview on Mastodon ↗
  2. background

    Hackers target Colorado water utilities' control systems — Foreign actors targeted operational technology (OT) and industrial control systems (ICS) at two private water utilities in Colorado, changing equipment settings, disabling remote access and alarms, and altering pumping cycles.