Iran-Linked Hackers Widen Attacks on US Water Systems

Water utilities across the United States are facing a growing wave of cyberattacks from hackers linked to Iran, with New Jersey and Alabama becoming the latest states confirmed as targets. Reports indicate that at least a dozen US states have now seen their industrial control systems (ICS) - the technology used to manage and monitor critical infrastructure like water treatment - come under attack.

While this campaign is focused on US water utilities, it highlights a broader trend that Australian small businesses should take seriously: attackers are increasingly targeting operational technology and critical infrastructure, not just traditional IT networks. Many small and medium businesses now rely on connected devices and control systems for things like building management, manufacturing equipment, or utilities monitoring, and these systems are often less protected than standard computers.

Even if your business isn't a water utility, this incident is a reminder that any internet-connected operational system can become a target if left unsecured. Ensuring these systems are properly segmented from the internet, regularly updated, and monitored for unusual activity is essential to reducing risk.