Introduction to Malware Binary Triage (IMBT) Course
Looking to level up your skills? Get 10% off using coupon code: MWNEWS10 for any flavor.
Enroll Now and Save 10%: Coupon Code MWNEWS10
Note: Affiliate link – your enrollment helps support this platform at no extra cost to you.
Key Takeaways
- A coordinated cyberattack in late July 2026 disrupted water and wastewater operations across more than 30 Minnesota communities.
- The FBI and EPA warned that malicious actors are tampering with internet-exposed PLCs in the water sector.
- The intrusions used no novel exploit or custom malware, only MicroLogix 1100 and 1400 controllers exposed directly online.
- Attackers changed device IP addresses and set passwords, locking operators out and causing loss of view and control.c
- Reported impacts included pressure loss and flooding, with pressure loss risking untreated groundwater seeping into pipes.
In late July 2026, more than 30 Minnesota communities lost operational visibility and control over water and wastewater equipment in a coordinated cyberattack, and the FBI and EPA issued a joint Public Service Announcement (PSA) warning that malicious cyber actors are tampering with internet-exposed Programmable Logic Controllers (PLCs) across the Water and Wastewater Sector (WWS) [1], [2].
Article Link: Minnesota Water Systems Attacks: Internet-Exposed PLCs Under Attack