Former NSA chief: Water systems should not be connected to the internet
Iran-linked cyberattacks targeted water systems in 12 US states.
1Cyber threats to water systems
Former NSA chief Paul Nakasone revealed that water systems in at least 12 US states have been targeted by Iran-linked hackers. Programmable logic controllers (PLCs), which monitor water tank levels and control pumps, were the main targets. Nakasone emphasized that these devices should not be connected to the internet. The FBI had announced in late July that it was investigating attacks on such operational technology devices.
2Iran-linked attacks
Security researchers suspect that Iranian hacker groups are behind recent cyberattacks targeting water and wastewater facilities. Cynthia Kaiser, SVP at Halcyon Ransomware Research Center, said, "I'd be shocked if it's not Iran." Iran has a history of similar attacks. However, neither the FBI nor the Trump administration has officially blamed Iran for these attacks.
3Vulnerability of US water systems
US water systems consist of historically underfunded facilities with limited IT staff. Nakasone noted there are 50,000 different water municipalities, providing 90% of the country's water. This creates a vast attack surface. More partnerships and resources are needed to defend these systems.
4DEF CON Franklin project
Nakasone highlighted the DEF CON Franklin project, where hackers volunteer to help secure water facilities. Launched two years ago, this project aims to enhance critical infrastructure resilience using open-source technologies. Nakasone also serves as founding director of Vanderbilt University's Institute of National Security.
5Role of Project Chimera
Nakasone is also working on Project Chimera, a cybersecurity platform developed by academics and cybersecurity practitioners. Built on open-source technologies, it aims to boost critical infrastructure resilience. Nakasone said, "How do you defend better? With a series of partners, in a much more involved approach than we have now."
6Security risks of PLCs
PLCs are a critical part of industrial control systems but often run on outdated and vulnerable software. These devices control the operation of critical infrastructure like water and energy. Nakasone stressed that they should not be connected to the internet and called for higher security standards.
7Iran's cyber capabilities
Nakasone stated that Iran has the capability to launch cyberattacks on water facilities. "I see an actor here that has certainly shown a history of being able to do this," he said. Iran has a history of similar attacks. Nakasone noted that tensions between the US and Iran could trigger such attacks.
8Future of critical infrastructure
The security of critical infrastructure like water systems is vital for national security. Nakasone emphasized the need for more partnerships and resources to defend these facilities. Open-source technologies and contributions from volunteer hackers can play a key role. Initiatives like Project Chimera aim to prepare for future cyber threats.