Coordinated "cyberattack" on U.S. water utilities: What you need to know

Sicherheitsmeldung mit Schweregrad kritisch (CVSS 9.8). Sie wird laut CISA-KEV aktiv ausgenutzt und sollte priorisiert behandelt werden. Betroffene Kennungen: CVE-2021-22681, CVE-2023-3595, CVE-2023-3596, CVE-2024-6242. Technische Details im Tab „Originaltext“; empfohlene Schritte in der Checkliste.

Originaltext der Quelle (nicht übersetzt) – die deutsche Zusammenfassung findest du im Tab „Kurzfassung".

A coordinated cyber attack disrupted water and wastewater systems in at least 12 U.S. states, including more than 30 Minnesota communities. Here is what defenders need to know about the attack so far. This FAQ also details recent cyberactivity targeting internet-exposed PLCs, and how to protect exposed infrastructure.Change logUpdate August 6: This FAQ has been updated to add publicly confirmed affected states and a named victim, incorporate the FBI's identification of targeted PLC models and reported operational impacts (pressure loss, flooding), and add additional reference links. The title and introduction have been updated to reflect the nationwide scope of the campaign.This is an active situation. Tenable's Research Special Operations team is monitoring developments and will update this FAQ as new information becomes available from federal agencies, state officials, and independent reporting.Click here to review the change log historyUpdate August 6: This FAQ has been updated to add publicly confirmed affected states and a named victim, incorporate the FBI's identification of targeted PLC models and reported operational impacts (pressure loss, flooding), and add additional reference links. The title and introduction have been updated to reflect the nationwide scope of the campaign.Update August 4: This FAQ has been updated to include an ABC News report that says attacks have been reported in at least 12 states.Update August 4: This FAQ has been updated to note that the attacks have affected at least seven states, including Minnesota and Michigan, and to add details of …

Vollständiger Originalartikel ↗

• Betroffenheit im eigenen Stack prüfen (CVE-2021-22681, CVE-2023-3595, CVE-2023-3596, CVE-2024-6242): Versionen/Komponenten abgleichen.
• Originalquelle / Hersteller-Advisory lesen: https://www.tenable.com/blog/coordinated-cyberattack-on-u-s-water-utilities-what-you-need-to-know
• Priorität HOCH: laut CISA-KEV aktiv ausgenutzt – bevorzugt patchen.
• Verfügbaren Patch oder Workaround einspielen und dokumentieren.
• Erkennung: Logs und Indikatoren (IoCs) auf Ausnutzung prüfen.