US warns AI-powered hackers targeting vulnerable water systems

The hackers are reportedly using AI to generate exploit scripts, which rely on publicly available information to find and compromise controllers running outdated software or lacking adequate security. This sophisticated approach allows for the identification and targeting of these vulnerable devices, potentially leading to significant disruptions.

These attacks are part of a broader pattern of cyber activity affecting water supply and wastewater systems across the United States. The agencies noted that such disruptions could result in downtime, safety incidents, or damage to essential equipment. Officials have previously advised critical infrastructure owners to keep these devices isolated from the internet, with rural communities often being disproportionately affected due to the large service areas of their systems.

This latest warning follows a series of cyberattacks attributed to suspected Iranian hackers targeting U.S. water providers in recent months. The escalation of these attacks underscores the growing threat posed by AI-enabled cyber intrusions into critical infrastructure. Reported intrusions have occurred at water facilities in Minnesota, Michigan, Arkansas, Georgia, and New Jersey.