Blackberry Coordinated Cyberattacks Disrupt U.S. Water Utilities in July 2026
Article Content
- •Over 30 water systems in Minnesota and other states were disrupted by cyberattacks.
- •The FBI, EPA, and CISA issued a joint advisory detailing immediate response actions.
- •Utilities are urged to prepare for incidents without reliable telecommunications.
In late July 2026, a series of cyberattacks targeted over 30 community water systems in Minnesota and other states, disrupting operations and prompting a joint advisory from the FBI, EPA, and CISA. The attacks focused on operational and administrative systems essential for safe water delivery. CISA reported a significant increase in threat activity aimed at programmable logic controllers in the water sector. The advisory emphasized immediate actions for utilities, including isolating affected systems and hardening their defenses. Operators were advised to prepare for incidents without reliable telecommunications, highlighting the need for manual coordination during crises. The attacks occurred amid a broader context of increased cyber threats to critical infrastructure. The current status remains under assessment as utilities implement the advisory's recommendations.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (6)
Continue Reading
CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active…
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…