|
View this as a web page
The Washington State Department of Health Office of Drinking Water continues to share information from our federal partners committed to warning you of the cybersecurity threat landscape currently in place across the U.S.
The latest bulletin comes from The National Security Agency (NSA), Cybersecurity and Infrastructure Security Agency (CISA), Federal Bureau of Investigation (FBI), Department of Energy (DOE), and Environmental Protection Agency (EPA)—hereafter referred to as the authoring agencies—are releasing this Cybersecurity Advisory to warn owners and operators of industrial control systems (ICSs) of an active cyber threat to Siemens S7 Series PLCs and provide relevant mitigations to protect and defend them.
This advisory relates to an active threat to Siemens S7 Series programmable logic controllers (PLCs). However, ongoing PLC targeting activity is broader than Siemens PLCs. All PLC owners and operators should apply relevant mitigations to reduce the risk to their devices and systems. The Siemens-specific content in this advisory should be understood and applied as one subset of the wider threat landscape.
Top Mitigation Actions
-
Inventory all Siemens S7 Series programmable logic controllers (PLCs).
-
Apply critical security patches.
-
Ensure PLCs are not accessible from the internet.
-
Strengthen access controls.
-
Monitor for unauthorized activity.
-
Harden PLC services, protocols, and ladder logic integrity.
-
Hunt for anomalies that may indicate a compromise.
In addition to the federal links and resources, Region 10 CISA is ready to support and assist drinking water systems serving Washington.
CISA Region 10: CISARegion10@cisa.dhs.gov.
CISA Region 10 Operations email: cisaregion10ops@cisa.dhs.gov
Organizations are encouraged to report cyber incidents to the Washington State Department of Health, Office of Drinking Water, our afterhours number for utility personnel experiencing emergencies is 1-877-481-4901. During normal business hours please consult our Drinking Water Contacts and Office Location webpage.
|
