NMED News:

The New Mexico Environment Department: (NMED) announced that the U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued an alert Sept. 25, 2024, that there has been additional pro-Russia Hacktivist Activity at water systems using the same techniques as earlier attacks.

CISA continues to respond to active exploitation of internet-accessible operational technology (OT) and industrial control systems (ICS) devices, including those in the Water and Wastewater Systems (WWS) Sector.

Exposed and vulnerable OT/ICS systems may allow cyber threat actors to use default credentials, conduct brute force attacks, or use other unsophisticated methods to access these devices and cause harm.   

CISA urges OT/ICS operators in critical infrastructure sectors to apply the recommendations listed in  Defending OT Operations Against Ongoing Pro-Russia Hacktivist Activity to defend against this activity.

To learn more about secure by design principles and practices, visit CISA’s Secure by Design webpage.

For more information and guidance on protection against the most common and impactful threats, tactics, techniques, and procedures, visit CISA’s Cross-Sector Cybersecurity Performance Goals.

This alert is available at: https://www.cisa.gov/news-events/alerts/2024/09/25/threat-actors-continue-exploit-otics-through-unsophisticated-means.