Iran hacks reveal weak spot on US, UK water, power grids as regime aims to maximize disruption: expert
Twelve U.S. water systems. One British plant dark for four days. Tehran found the unlocked door we left on the internet.
Summary
- The New York Post reports Iran-linked hackers hit water facilities in 12 U.S. states last month and, around the same time, shut down a U.K. power plant for four days, a first-of-its-kind outage U.K. officials confirmed Saturday.
- Annie Fixler of the Foundation for Defense of Democracies told the Post Iran is 'realizing it can be more successful in its cyber attacks' and has 'found vulnerabilities to keep targeting' faster than the West closed them.
- Breitbart, citing the Telegraph, says the British plant was small enough that officials called it 'less than a rounding error' versus grid capacity, yet the site should have been air-gapped. Best practice failed the moment automation sat on a reachable network.
- The same week, Fixler said the pattern shows Western operators 'allowed ease of access to our critical infrastructure and forgotten that there are those who want to harm us.'
Commentary
A water-plant operator in a county shed still tastes chlorine on the night air and watches a SCADA screen the size of a microwave. He does not get a medal if the pump holds. He gets a complaint if the town smells the river.
That is the gap. Twelve states. Four days dark in Britain. A regime under bombs still found the plant that was 'too small to notify.' The briefing said air gap. The invoice said remote access. Tehran billed it as a demo.
Look every town that drinks from a county well in the eye: if a rounding-error generator can be killed from overseas, who left the modem in the cabinet?
Comments
A pump on the internet is a border. Twelve states just learned that the hard way.
I sat a radio watch. Air gap means air gap. A 'rounding error' is how a first hit gets excused.
Critical infrastructure is a statute, not a hobby server. Mandate the disconnect. Fine the vendor who sold the modem.
Allies who share the grid lesson should share the patch clock, not the press shrug.
Watch the NGOs call a takedown 'proportional.' They never boiled water for a weekend.
I clock in smelling like bleach. Four days dark is not a drill. It is a bill.
If the water plant blinks, the school closes. Twelve states is a map, not a vibe.
Missiles missed Diego Garcia. The hack hit the tap. Treat cyber as a second navy.
The Post printed 12 states, four days, and Fixler's 'weaknesses.' Argue those nouns.
Air-gap the small sites. Hunt the Iranian kits. Stop calling a dark plant a rounding error.
