‘Watershed 250’ test program in Texas looks to private sector for water cybersecurity help

The Trump administration rolled out a six-month test program in Texas on Monday that will draw on volunteer expertise and technology from cyber and artificial intelligence companies to protect the water sector.

“Project Watershed 250” is the first of the state-based, industry-centric pilot projects to cross the finish line that the Office of the National Cyber Director has previewed since the publication of its national cybersecurity strategy earlier this year. Water systems have long been viewed as among the most vulnerable and neediest critical infrastructure sectors, and in recent months the sector has been the victim of a spree of attacks.

“Project Watershed 250 is a commitment from the states, industry and federal government that we will continue to prioritize our nation’s safety and deliver on America-first policies for the American people,” National Cyber Director Sean Cairncross said at a rollout event in San Antonio Monday.

“U.S. companies are providing world-class cyber capabilities, red teaming that tests utilities’ current defenses, system hardening using the latest private sector cyber tools and AI tooling that helps utilities’ frontier cyber defenders to protect Texas water systems and scale proven solutions across the country,” he said. “This six-month pilot program is designed to make our water and wastewater critical infrastructure more resilient and resistant to cyber attacks by proactively finding and fixing system weaknesses.”

The pilot program, featuring collaboration between federal and state governments, stands in contrast to how the Biden administration tried to tackle the issue, with audit requirements that some GOP states challenged in court, forcing Biden’s Environmental Protection Agency to withdraw its rule .

“For too long, at least on the federal level, the government has admired the problem of cybersecurity in water systems,” Cairncross said. “We are going to find out what works. We’re going to target that, and we are going to scale off of this and learn lessons.”

A dozen companies — Parsons, Microsoft, Fortinet, Google Cloud, Palo Alto Networks, Amazon Web Services, Reflection AI, Cloudflare, Zscaler, Forescout, Abnormal AI and Dragos — appeared at the rollout Monday to praise the initiative and tout their contributions to it.

Texas Gov. Greg Abbott said the program would be overseen by Cairncross’s office and Texas Cyber Command, which was established just last year. Abbott cited the need for the program by mentioning “an Iranian-backed cyberattack” on 30 water systems across 12 states and a 2024 attack on the water system in Muleshoe, Texas, suspected to be the work of Russian hackers .

“The need for cyber resilience is overwhelming,” Abbott said. “Many rural providers simply don’t have the resources they need to be able to protect themselves.”

Watershed 250 isn’t the only federal effort to bolster water cybersecurity, with lawmakers introducing legislation in the aftermath of the recent attacks. Past legislation that Congress has enacted also sought to tackle the problem.

What the Section 702 lapse means for cybersecurity

The Vulnpocalypse arrived early

Rethinking how federal cyber hiring actually works

The world still treats bug hunters like criminals

Former sexual abuse victims say Grok used their images, videos to train deepfake capabilities

Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure

Election official says Tina Peters would be consultant, won’t have access to election systems

Arrested man allegedly impersonated NSA elite hacking unit, Supreme Court chief justice

The GTA VI leaks are breaking the internet. Security researchers have seen this before.

Bipartisan Senate bill aims to prepare energy sector for Q-Day

The push to designate AI as the critical infrastructure sector Exclusive

Eight years later, federal authorities re-up charges against alleged Iranian hackers at Mabna Institute

Two alleged TeamPCP members arrested and charged after months of software supply-chain chaos

Officials disrupt Chinese espionage operation that hit multiple federal agencies

Three 10.0 security flaws fixed across Ubiquiti’s UniFi line

Water sector passes, government sector fails attempts to spot and halt simulated CISA attack

Postal Service moves to finalize mail ballot regs before SCOTUS ruling

Lawmakers seek watchdog review of federal hacking of Americans

Retail theft bill spurs ‘very large and very dangerous’ surveillance fears

A California county wants to hire Tina Peters to help run its elections