*Page Updated September 18, 2023
Latest Cybersecurity Advisory: People's Republic of China State-Sponsored Cyber Actor Living off the Land to Evade Detection
- EPA Update Regarding China State-Sponsored Cyber Threat - August 17, 2023
To help water and wastewater utilities stay informed about recent cybersecurity threats, the below information and links provide resources and information from Environmental Protection Agency (EPA), Cybersecurity and Infrastructure Security Agency (CISA), Water Information Sharing and Analysis Center (WaterISAC), American Water Works Association (AWWA).
Please report any suspected criminal cyber activity to FBI and/or CISA as quickly as possible. The EPA/WaterISAC Joint Advisory on Potential Threat to Critical Infrastructure and CISA’s Shields Up Website contain the latest information and developments.
Resources
- AWWA: Resources on Cybersecurity
- EPA: Cybersecurity Best Practices for the Water Sector
- EPA: Incident Action Checklist - Cybersecurity
- EPA: Supporting Cybersecurity Measures with the Clean Water State Revolving Fund
- EPA: Supporting Cybersecurity Measures with the Drinking Water State Revolving Fund
- Hampton Roads Sanitation District - Roundtable on Cyber Incidents and the Public Sector Presentation
- Joint Cybersecurity Advisory - Compromise of U.S. Treatment Water Treatment Facility
- WaterISAC - 15 Cybersecurity Fundamentals
- WaterISAC - Advisory on Current Egregor Ransomware Incident at Large Metropolitan Water Utility
- White House - What We Urge You To Do To Protect Against the Threat of Ransomware
- White House - FACT SHEET: Act Now to Protect Against Potential Cyberattacks
- White House - Statement by President Biden on our Nation’s Cybersecurity
- White House - FACT SHEET: Competitive Infrastructure Funding Opportunities for Local Governments
- *FACT SHEET: Water Vulnerability Scanning