AI supercharges Iranian cyberattacks on U.S. water systems

The 2026 Iranian-linked cyberattacks on U.S. municipal water systems exposed critical vulnerabilities in operational technology, particularly programmable logic controllers (PLCs) and human machine interfaces (HMIs) that were directly accessible from the internet. These devices, essential for automating water treatment and distribution, were often left exposed due to weak or default credentials and poor security configurations, enabling attackers to exploit them without deploying custom malware. This systemic weakness was underscored by the use of known MITRE ATT&CK techniques such as exploiting public-facing applications and valid accounts with weak credentials, which allowed adversaries to manipulate device IP addresses, wipe configuration data, and tamper with mechanical sensors, effectively disrupting monitoring and control capabilities.

A significant factor contributing to these vulnerabilities is the legacy nature of many PLCs, often installed years ago by third parties, which continue to operate with outdated security practices like factory-default or absent passwords. As James Turgal observed, many devices remain 'wide open' to attacks, particularly in smaller municipalities and rural areas where resource constraints and limited cybersecurity expertise hinder modernization efforts. Michael Garcia emphasized that the majority of these publicly owned water systems lack sufficient funding, highlighting the urgent need for dedicated cybersecurity grants to bolster defenses and prioritize OT security improvements.

Research using advanced tools like PLCHound revealed that prior estimates drastically undercounted internet-accessible PLCs by up to 37 times, with nearly 96% exposing protocols linked to critical vulnerabilities. This alarming prevalence of exposed and unsupported PLCs means that many water systems are effectively leaving their 'doors unlocked' for attackers, as Saman Zonouz analogized. The inherent design of OT systems prioritizing reliability over cybersecurity further complicates mitigation, necessitating systemic improvements beyond simple patching to address these persistent security gaps.

Mitigation strategies emphasize isolating PLCs both externally and internally to prevent unauthorized access, as recommended by Siemens’ updated hardening guidance and echoed by cybersecurity experts. Modern OT monitoring systems, now protocol-aware, can detect sophisticated attacks such as falsified timing signals, enhancing detection capabilities. Additionally, attackers have been observed exploiting corrupted libraries like the Snap 7 DLL to compromise PLCs remotely without direct HMI access, while compromising HMIs could allow use of native PLC management software—though this may leave logs, prompting attackers to develop custom tooling. These insights underscore the necessity of comprehensive isolation, continuous monitoring, and adherence to vendor hardening protocols to strengthen water system resilience.

Iranian-affiliated threat actors have demonstrated a sophisticated grasp of operational technology environments by exploiting internet-exposed devices through weak or default credentials, enabling them to change passwords and manipulate IP addresses to lock out legitimate operators. Their tactics align with multiple MITRE ATT&CK techniques such as exploiting public-facing applications (T1190), using valid accounts (T1078), and manipulating industrial control systems (T0813), reflecting a methodical approach that bypasses the need for custom malware in favor of direct system manipulation.

The integration of AI-driven tools has markedly accelerated the speed, scale, and sophistication of these cyberattacks by automating vulnerability discovery and exploitation across near-identical OT assets. As e2e-assure CEO Rob Demain explains, AI lowers the barrier to entry for attackers by enabling rapid identification of weaknesses and crafting repeatable attacks without the need for extensive manual effort, effectively shifting the economics of attacking critical infrastructure in favor of adversaries.

These Iranian-linked actors have evolved their tactics to include covert manipulation of programmable logic controllers (PLCs), altering water treatment processes and disabling alarms or shutdown functions to create unsafe conditions without operator awareness. Experts like John Walsh highlight that such attacks can mislead operators with false system status reports, echoing the deceptive strategies seen in Stuxnet, while ongoing refinement of these techniques since 2023 underscores a persistent and growing threat to water infrastructure safety.

Federal agencies such as CISA have issued urgent directives urging water utilities to remove internet-facing programmable logic controllers (PLCs) and replace end-of-support devices, which remain prime targets for cyber attackers due to outdated configurations and default passwords. Michael Garcia described these exposed PLCs as 'low-hanging fruit,' often resulting from third-party installations and resource-strapped smaller utilities that lack cybersecurity expertise, underscoring the critical need for dedicated grant programs like the proposed Water Cyber Shield Act to bolster funding and EPA authority for comprehensive OT security improvements.

CISA’s evolving guidance emphasizes foundational cybersecurity hygiene—mandating multifactor authentication, strong password policies, employee phishing training, and timely patching through Binding Operational Directives 26-02 and 26-04—to enhance operational resilience amid accelerating vulnerability discovery fueled by AI advancements. Moreover, the agency promotes robust information sharing and incident reporting as vital components of a coordinated federal and state response, yet the federal government’s recent strategic retreat places greater responsibility on states and localities, often without commensurate support, challenging their capacity to secure critical water infrastructure effectively.

Incident response capabilities within the water sector have shown marked improvement, as demonstrated by rapid detection and containment during CISA’s red team exercises, contrasting sharply with government sector struggles hampered by alert fatigue and siloed communication. However, both sectors share persistent vulnerabilities such as underestimating cloud risks and lacking Conditional Access controls, highlighting ongoing gaps that federal advisories must address to strengthen cyber resilience and ensure continuity of water services during sophisticated cyberattacks.

Recognizing the transnational nature of cyber threats, federal agencies are increasingly advocating for international collaboration and real-time information sharing among allied nations, including Five Eyes and NATO partners, to proactively mitigate risks before attacks materialize. This global approach complements domestic efforts by reinforcing the urgency to protect municipal water systems from persistent Iranian-linked cyber intrusions, which starkly reveal the vulnerabilities still plaguing U.S. critical infrastructure.

A foundational pillar of evolving best practices in water utility cybersecurity is rigorous adherence to the '3Rs of Cybersecurity'—Reduce, Replace, Recover—as championed by CISA. This approach emphasizes eliminating outdated, end-of-support devices through directives like Binding Operational Directive 26-02 and prioritizing patching with 26-04, thereby mitigating vulnerabilities inherent in legacy operational technology. Complementing these technical measures, utilities are urged to invest heavily in employee training to recognize phishing, enforce strong password policies, and implement multifactor authentication, alongside robust logging, backup, and encryption protocols, creating a comprehensive defense-in-depth posture.

Isolating programmable logic controllers (PLCs) both externally and internally has emerged as a critical best practice following Siemens’ updated hardening guidance, which underscores the necessity of shielding these devices from direct internet exposure and unauthorized lateral access. Modern protocol-aware monitoring technologies now enable detection of sophisticated attacks, such as falsified timing signals, enhancing incident detection capabilities. However, as recent breaches reveal, many utilities suffered compromises not from advanced exploits but from basic security lapses like unchanged default passwords and unsecured remote access, highlighting the urgent need to address fundamental hygiene alongside technological upgrades.

Investment in skilled cybersecurity personnel who maintain comprehensive inventories of connected devices and possess deep operational technology expertise is indispensable for effective incident response and resilience. As one expert noted, cybersecurity challenges persist partly because many operators lack the technical knowledge to implement even basic controls like changing default passwords or authenticating systems. This human capital investment is critical given threat actors’ increasing use of AI-driven research to uncover hidden vulnerabilities in legacy OT systems, necessitating advanced monitoring and rapid manual recovery capabilities demonstrated effectively in states like Minnesota.

Given the transnational nature of cyber threats targeting critical infrastructure, fostering robust international collaboration through initiatives like CI Fortify and strengthening information sharing among allied nations—including Five Eyes and NATO partners—is paramount. This global network facilitates preemptive communication and coordinated defense strategies, ensuring that water utilities can sustain operations and recover swiftly from incidents. Meanwhile, the federal government’s current tendency to defer responsibility to states and local governments without commensurate support underscores the pressing need for enhanced federal-state partnerships to bolster resilience across the water sector.