There hardly goes a day without news of cyberattacks taking place at banks, tech companies, or government agencies. From targeting the individual to the masses, hackers are getting ever more creative in what they strike at, in order to compromise systems and gain sensitive information. Well, the US White House and Environmental Protection Agency (EPA) are now warning that public water and sewage systems are the latest points of attack and state administrations are being urged to improve the security of such plants.
The plea for 'water resilience' from the White House and EPA (via The Verge) came in the form of an open letter to US state governors and a call to attend a virtual meeting on how best to combat attacks from state-sponsored groups. In the letter, it's claimed that 'drinking water and wastewater systems are an attractive target for cyberattacks because they are a lifeline critical infrastructure sector but often lack the resources and technical capacity to adopt rigorous cybersecurity practices.'
However, some of the practices that should, but haven't, been followed are arguably not all that rigorous. This small section of the latter highlights what I mean: «In many cases, even basic cybersecurity precautions—such as resetting default passwords or updating software to address known vulnerabilities—are not in place and can mean the difference between business as usual and a disruptive cyberattack.»
You'd think that changing a default admin password on a router, for example, would be common practice by all IT departments but that's clearly not happening. What you're seeing there is an over-reliance on the strength of the password, which is typically very strong on networking devices. However, if the database of passwords used for such devices is ever compromised and the details publicly leaked, then it's not even remotely strong any more.
Windows 11 review: What we think of the latest OS.
How to install Windows 11: Our guide to a secure install.
Windows 11