Def Con Franklin, NRWA Launch Free Water Cyber Program for 5 Providers as Attacks Hit 12 States
Updated
Updated · BankInfoSecurity.com · Aug 12
Def Con Franklin, NRWA Launch Free Water Cyber Program for 5 Providers as Attacks Hit 12 States
3 articles · Updated · BankInfoSecurity.com · Aug 12
Summary
Def Con Franklin and the National Rural Water Association launched the Water Watch Center, pairing five managed detection and response providers with small U.S. water utilities at no cost.
The rollout follows suspected Iranian-linked attacks on industrial controllers at water systems in at least 12 states, where operators were locked out of equipment controlling pressure, flow and chemical treatment.
Experts said the program addresses a real staffing gap but may miss the most urgent weakness at many small systems: internet-exposed controllers, default credentials and poor network segmentation.
Jake Braun of Def Con Franklin said the effort is not monitoring alone, arguing small utilities need both basic cyber hygiene and active detection because most currently have neither.
Congress is weighing a broader response: a new Senate bill would give EPA cyber-assessment authority and authorize $300 million a year, underscoring how far charitable programs alone may fall short.
Can a free cyber monitoring program truly protect small water utilities if their core systems remain dangerously exposed to the public internet?
Should vulnerable water facilities abandon digital automation entirely and return to manual, air-gapped physical controls to guarantee public safety from nation-state hackers?
With past free security offers proving too costly to maintain, how will this new initiative avoid bankrupting under-resourced rural water systems?