Recent security research by SpyCloud indicates that a significant number of water and wastewater providers across the United States are vulnerable to cyberattacks. Infostealing malware has compromised employee credentials and active session tokens across nearly twenty percent of the organizations analyzed, highlighting a widespread security gap.
The findings reveal that exposed credentials in numerous organizations could potentially grant malicious actors unauthorized entry into operational networks and remote management systems. While other recent incidents targeting public utilities have been linked to state-sponsored campaigns, the ongoing circulation of stolen passwords remains a critical vulnerability for essential infrastructure security.
- Over 1,700 U.S. water providers compromised by infostealer malware
- Stolen credentials and session tokens expose critical operational networks
- At least 250 organizations risk unauthorized access to remote control systems
- Critical infrastructure sectors face parallel threats from malware and weak security
Sources:
