Latest / GNN Daily Breaking News / Cybersecurity Threats Expose New Risks To Essential Utilities

Transcript

Cybersecurity Threats Expose New Risks To Essential Utilities · GNN Daily Breaking News

• 0:00
  Speaker 1: Concerns about the cybersecurity of critical infrastructure in the United
• 0:04
  Speaker 1: States have intensified after Colorado officials revealed that foreign hackers
• 0:09
  Speaker 1: targeted two local water systems in August, highlighting the growing
• 0:13
  Speaker 1: vulnerability of essential public services to digital threats. According to
• 0:18
  Speaker 1: the office of Colorado Governor Jared Polis, the incidents involved
• 0:22
  Speaker 1: two privately owned utilities that each serve fewer than 200 people.
• 0:27
  Speaker 1: while state officials stressed that there was no impact on
• 0:30
  Speaker 1: public safety, water quality, or service delivery. The attacks demonstrate
• 0:35
  Speaker 1: how cyber intrusions can reach beyond traditional computer networks and
• 0:39
  Speaker 1: effect systems responsible for providing basic necessities. The breaches occurred
• 0:44
  Speaker 1: in late August and involved attackers gaining access to operational
• 0:48
  Speaker 1: equipment used within the water systems. State officials said the
• 0:52
  Speaker 1: hackers manipulated settings by disabling remote access functions, turning off alarms,
• 0:57
  Speaker 1: and altering pumping cycles. Those actions were quickly identified and
• 1:02
  Speaker 1: addressed by the utility operators, who then notified state authorities.
• 1:07
  Speaker 1: Colorado officials said the risks were contained rapidly and that
• 1:10
  Speaker 1: treatment processes and the quality of drinking water were not affected.
• 1:15
  Speaker 1: Although investigators have not publicly identified the individuals or group responsible,
• 1:20
  Speaker 1: the governor's office noted that authorities are aware of ongoing
• 1:24
  Speaker 1: efforts by an Iranian-backed hacking group to gain access to
• 1:27
  Speaker 1: drinking water and wastewater systems across the United States. At
• 1:31
  Speaker 1: the same time, officials emphasized that they could not confirm
• 1:35
  Speaker 1: which foreign actors were involved in the Colorado incidents. That
• 1:39
  Speaker 1: distinction underscores a broader challenge facing cybersecurity investigators, who often
• 1:45
  Speaker 1: must carefully verify attribution before linking attacks to specific organizations
• 1:50
  Speaker 1: or countries. The Colorado intrusions took place amid a wider
• 1:54
  Speaker 1: pattern of cyberactivity targeting water infrastructure nationwide. Federal authorities have
• 2:00
  Speaker 1: issued multiple warnings in recent months regarding attempts to compromise
• 2:04
  Speaker 1: operational technology used in local utilities. an advisory from the
• 2:08
  Speaker 1: Cybersecurity and Infrastructure Security Agency in August referenced attacks affecting
• 2:14
  Speaker 1: roughly a dozen states and around 100 water entities. Security
• 2:19
  Speaker 1: experts noted similarities between those incidents and previous campaigns associated
• 2:23
  Speaker 1: with Iranian-linked actors that focused on programmable logic controllers, specialized
• 2:29
  Speaker 1: devices used to regulate machinery and industrial processes. The significance
• 2:34
  Speaker 1: of these events extends beyond the size of the affected utilities.
• 2:38
  Speaker 1: Water systems, energy networks, transportation services, and other forms of
• 2:43
  Speaker 1: critical infrastructure increasingly rely on connected technologies to improve efficiency
• 2:49
  Speaker 1: and monitoring. While those systems offer operational benefits, they can
• 2:53
  Speaker 1: also create new points of exposure when not adequately protected.
• 2:58
  Speaker 1: Even brief disruptions can force operators to spend resources restoring systems,
• 3:03
  Speaker 1: reviewing security controls, and strengthening defenses against future attempts. For Colorado,
• 3:09
  Speaker 1: the incidents ended without service interruptions or public health consequences,
• 3:14
  Speaker 1: but they serve as another reminder that cybersecurity has become
• 3:17
  Speaker 1: a central component of infrastructure protection. As government agencies, utilities,
• 3:23
  Speaker 1: and security specialists continue responding to evolving threats, the focus
• 3:28
  Speaker 1: remains on preventing unauthorized access before temporary disruptions can become
• 3:33
  Speaker 1: more serious operational challenges. The latest incidents demonstrate that even
• 3:38
  Speaker 1: small local providers are increasingly part of a larger cybersecurity
• 3:42
  Speaker 1: landscape that now reaches every level of essential public services.