ConflictClarifier

2026伊朗-海湾危机追踪
CC
Main
Live Data
Analytics
Tools
Reference
Events Archive
strikeAug 18, 2026

Cyberattacks on water facilities test US defenses, reveal gaps

Summary

Cyberattacks on water facilities test US defenses, reveal gaps Over two days in late July, water supply managers from Georgia to South Dakota saw their screens go dark and their controls go haywire. Hackers gained access to dozens of water utilities around the country, according to state and federal officials. They infiltrated computer systems, seizing control of equipment that prevents flooding and tap water contamination for hundreds of thousands of Americans. The FBI confirmed July 30 that cyber attackers hit water and wastewater utility companies in seven states. The bureau did not comment on the actors behind the attacks. Early investigations indicate that U.S. officials believe Iran may be responsible, according to media reports. For those familiar with America’s cybersecurity vulnerabilities, the attacks were not a surprise. The country’s critical infrastructure, particularly water providers in rural areas, has long been vulnerable to cyberattacks. Foreign adversaries have attacked before, but federal and some state authorities have been slow to equip these utilities with the resources and training they need to protect themselves. Why We Wrote This A spate of cyberattacks on water utilities across the United States last month were resolved quickly. Yet the incidents underscore weaknesses, particularly in small or rural towns with fewer resources to protect infrastructure. Some trade groups are calling for minimum cybersecurity requirements. In one sense, the water utility cyberattacks highlight improvements in America’s cybersecurity defenses. The warnings arrived quickly and no serious damage was done. At the same time, the volume of successful attacks illustrates the vulnerabilities that remain and could be expanding. “Utilities were able to notice the attack quickly, take action quickly, and there were no dire consequences,” says Cynthia Finley, director of regulatory affairs at the National Association of Clean Water Agencies, a lobbying group. But, she adds, “we’re concerned about more sophisticated cyberattacks. … It will be a constant challenge to keep up with the evolving threat.” Locked out of computer systems Four days before the attacks began, seven federal agencies updated a cybersecurity advisory raising alarms about “ongoing Iranian-affiliated cyber targeting” of “U.S. critical infrastructure sectors.” The advisory cautioned that hackers were trying to access internet-connected devices controlling equipment used by that critical infrastructure. According to a separate advisory by the FBI following the late-July attacks, hackers accessed those devices remotely and then changed IP addresses and passwords, effectively locking the utilities out of their own computer systems. “Operational effects reported to the FBI have included loss of pressure and flooding,” the agency said. “Pressure loss in water systems could potentially allow untreated ground water to seep into pipes.” The FBI did not respond to questions, referring only to that statement. According to reports, water utilities in at least 12 states were hacked – a larger number than the FBI has confirmed – including more than 30 in Minnesota. For Karleen Kos – CEO of the Minnesota Municipal Utilities Association, a trade group – the attacks caused a variety of issues. Some operators stopped being able to see what was happening in their water systems; some lost automated control over some equipment and had to switch to manual controls; for others, some controls began acting oddly, like a caps lock command getting stuck on a keyboard. “People started to notice anomalies that didn’t make sense, so they shut the equipment down, rebooted it, and did something to correct what they were seeing,” she says. Nobody’s drinking water was threatened, she adds. Other utilities in the state took manual control of equipment they could no longer control through computer systems. The U.S. has had other near misses. In 2024, several small Texas towns had their water utilities targeted by Russia-linked hackers, including one town where hackers caused a water storage tank to overflow for nearly 45 minutes. In 2013, Iranian hackers took control of a small dam 20 miles north of New York City. While the hackers gained access to the dam’s computer systems, they were unable to move its sluice gates. Smaller utilities targeted The cyberattacks last month were broader in their geographical scope than past hacks but still relatively low-tech, according to experts. The hackers seem to have successfully targeted specific, internet-connected equipment that also had weak password protection. “These were opportunistic [attacks], which is in keeping with what we’ve seen [from] Iran,” says Tahira Mammen, an AI security expert at the RAND Corporation. Other recent cyberattacks on U.S. water infrastructure have largely fit the same profile and have targeted smaller utilities that are understaffed and underfunded. Water infrastructure in general has only recently been computerized, so operators are often inexperienced in basic cybersecurity practices. Many smaller utilities can’t afford to hire dedicated cybersecurity teams. Federally-funded training and improvements on this front are all voluntary, and many smaller utilities don’t know they exist or don’t have the resources to access them. Nearly 90% of public water utilities in the U.S. serve fewer than 10,000 people, according to a National Conference of State Legislatures report in 2022. Some water industry groups are now pushing Congress to enact minimum cybersecurity requirements. On Aug. 5, the American Water Works Association sent a letter to congressional leaders calling on lawmakers to pass a number of bills related to cybersecurity funding for water utilities. The same day, the head of the National Association of Water Companies issued a similar statement, adding that “the absence of uniform cybersecurity standards leaves too many systems vulnerable.” Some organizations oppose such requirements, however, especially given the pace at which cyber threats are evolving. Congress and the Environmental Protection Agency should prioritize increasing education and funding for programs that already exist, says Ms. Finley at NACWA. That “is a more practical solution than regulatory requirements, which will take years to develop,” she adds. Cuts to federal cyber defense department Amid this changing landscape, America’s leading cyber defense department, which works to protect U.S. infrastructure, has been getting downsized and defunded by the Trump administration. The Cybersecurity and Infrastructure Security Agency has lost roughly one-third of its workforce, about 1,000 employees, since January 2025 through a combination of layoffs, buyouts, and early retirements. The administration’s 2027 budget proposes a $707 million cut to the agency. The cuts “eliminat[e] weaponization and waste,” the White House says in the budget. The agency has not had a permanent director since President Donald Trump returned to the White House. That turmoil didn’t prevent the agency from responding effectively to July’s major cyberattack on U.S. water infrastructure, and cyber experts are optimistic that the half-dozen agencies overseeing the country’s cyber defense are able to protect its critical infrastructure. “We’re in a moment of strong investment in cybersecurity,” through other federal and private investment, says Ms. Mammen, who previously served as head of the NSA’s Artificial Intelligence Security Center. “We have the technology to be in front of the problem, we just need to apply the technology appropriately.”

Actors involved

USIranRussia

Sources

  • The Christian Science MonitorBy The Christian Science Monitor

    Cyberattacks on water facilities test US defenses, reveal gaps Over two days in late July, water supply managers from Georgia to South Dakota saw their screens go dark and their controls go haywire. Hackers gained access to dozens of water utilities around the country, according …

See this event through different lenses

Compare how Western, Iranian, Israeli, Global South, and Pro-Peace perspectives frame this event.

Compare Perspectives

Community Notes

Community Notes

Loading notes...

Related events

strikeUnverifiedUSIsraelIranRussia

Israel could cease to exist after the Middle East conflict — senior Russian officer

○ 1 source

MOSCOW, August 19. /TASS/. The conflict in the Middle East could result in the disappearance of Israel, Lieutenant General Apty Alaudinov, deputy chief of the Russian Armed Forces’ Main Military-Political Department and commander of the Akhmat special forces unit, told TASS.

"We must realize that the war in the Middle East will only escalate. I believe that is precisely Israel’s objective to ramp up the conflict as much as possible and drag both the US and the entire NATO bloc into it. They are good at this. Ultimately, they will overestimate their strength and cease to exist as a state," he said.

The United States and Israel launched a military operation against Iran on February 28. In June, Washington and Tehran signed a memorandum of understanding calling for an immediate cessation of hostilities on all fronts, including in Lebanon. However, on the night of July 8, the United States resumed large-scale strikes against Iran, accusing it of violating the agreements regarding the Strait of Hormuz.

On August 2, US President Donald Trump stated that he had agreed to call off a planned massive strike on Iran in order to reach a deal with the Islamic Republic, adding that Tehran and Arab capitals had asked the US to refrain from attacking as the parties had agreed on the outlines of a future agreement.

Location: Israel
CurrentsAPI
strikeUnverifiedUSIsraelIran

Trump says no Iran talks planned, Hormuz open

○ 1 source

US President Donald Trump on Tuesday said no talks were taking place with Iran and insisted the Strait of Hormuz was open, contradicting Iran's assertion that the critical waterway remained shut to shipping. The receding prospects of a deal to end the nearly six-month conflict drove up oil prices again on Tuesday, while stock markets sagged and borrowing costs for major economies including the US hit multi-decade highs, amid concerns about the long-term inflationary and fiscal impact of the crisis.

A temporary ceasefire agreement expired on Monday and a senior Iranian official told Reuters that his country was moving to a "fully offensive" military posture due to the diplomatic stalemate, though there were no reports of fresh strikes by either side on Tuesday.

"There are no talks or conversations going on, or scheduled, with the Islamic Republic of Iran," Trump said in a post on Truth Social. "The Naval Blockade remains in full force and effect. The Hormuz Strait is open and operating. All water mines have been removed or detonated," he added.

On Monday, Jared Kushner, Trump's son-in-law and special envoy, had struck an upbeat tone, saying talks with Iran were still under way and were "probably more robust" than they had ever been. The nearly six-month conflict, which began with joint US-Israeli strikes on Iran, has settled into a stand-off, with Iran continuing to threaten shipping in the strait and Washington saying it could renew attacks if talks do not yield a long-term settlement.

Among the top US goals are preventing Iran from acquiring a nuclear weapon, but experts say that will be difficult without removing the enriched uranium believed to be buried at sites struck by the US military previously. Despite Trump's assertions that the situation in the Gulf was improving, countries continued to report attempts to disrupt shipping.

The United Arab Emirates' Defence Ministry said that it detected two ballistic missiles launched from Iran, the first such incident reported since a May 4 strike on the Fujairah port. It later reported that the missiles were targeting "maritime traffic" based on its assessments, according to a statement posted on X.

It said both missiles fell into the sea. Iran's foreign ministry spokesperson Esmaeil Baghaei rejected the comments and said the UAE's "accusations" were "baseless." The UAE Foreign Ministry said it had suspended all trade activities, exchanges and financial transactions with Iran until further notice, citing regional escalation that it said undermined regional and international peace and security.

Direct cargo shipping between the UAE and Iran had only resumed in late June via Dubai’s Jebel Ali Port. The UAE had suspended direct shipping in early March, just days after the war began. The United Kingdom Maritime Trade Operations said it received a report on Tuesday that a vessel was struck by an unknown projectile while sailing out through the Strait of Hormuz, causing engine room damage and a crew casualty.

The Omani Coast Guard was assisting the remaining crew, according to the report. There was no immediate comment from Tehran. Preliminary shipping data on Tuesday showed ship crossings via the Strait of Hormuz were still in single digits on Monday. Top Iranian negotiator Mohammad Bagher Ghalibaf said in comments published by state media that the strait would remain shut until the US met the conditions of an interim deal signed with Iran in June.

These conditions include the US ending its blockade of Iranian ports, lifting oil sanctions, releasing Tehran's frozen assets, and ending threats and military operations on all fronts, Ghalibaf told parliament. A memorandum of understanding signed on June 17 had set a 60-day time frame for a broader deal on Iran's nuclear programme and US sanctions.

That period elapsed on Monday and Trump said he had no plans to extend it. The agreement, which declared the "immediate and permanent termination of military operations on all fronts," had quickly unravelled over a dispute about control of the Strait of Hormuz, the narrow waterway through which a fifth of global oil and liquefied natural gas flowed before the war.

Iran remains open to dialogue with the US but does not confuse negotiations with surrender, Mohammad Mokhber, an adviser to Iran's supreme leader, said on Tuesday, according to the semi-official Fars news agency. Mokhber said military pressure and sanctions would not break Iran's resolve and that the country would defend its security, dignity and allies while not seeking war.

Location: Iran
CurrentsAPI
strikeUnverifiedUSIranRussiaUkraine

AI-assisted tool helped secure satellite communication system after 2022 Russian hacking

○ 1 source

WASHINGTON (AP) — On the same day it invaded Ukraine in 2022, Russia disabled thousands of satellite modems across Ukraine and other European countries, aiming to disrupt communications. A new AI-assisted tool aims to help close that kind of vulnerability amid concerns about continued Russian aggression and newer Iranian threats to cyber infrastructure.

The cybersecurity company Atalanta has released “Argo” — a product that includes the technology that was instrumental in securing Viasat's satellite communications network after the Russian hacking attack. Industry experts say it presents a new capability for those trying to defend critical systems in the emerging cyberwarfare theater.

Atalanta’s leaders say the new technology relies on what it calls “software understanding,” combining complex mathematics along with artificial intelligence technology to create the first commercially available system that can analyze software and internet-connected systems for vulnerabilities in a more comprehensive manner.

The conflicts in both Ukraine and Iran have highlighted the danger that hackers can pose to everyday life. This summer several government agencies have warned that Iranian hackers have been targeting water and wastewater systems, among other critical infrastructure.

“The tools and techniques of yesterday do not scale for today and ‘software understanding’ is going to be the path forward for anyone building a system of consequence for the United States,” Atalanta CEO and co-founder Anjana Rajan told The Associated Press.

Viasat’s chief of cyber strategy, Nick Saunders, said the new technology not only ensures that the Viasat network is hardened against future attacks but produces the math that backs up that claim. “We have built over the past year, working with Atalanta ...

a capability where we can start to develop an understanding of how our systems are more resilient against attacks,” Saunders said. Atalanta's technology has also been tapped to work on the Genesis Mission — the Department of Energy’s effort to create autonomous nuclear reactors.

Greg Shannon, the chief cybersecurity scientist at the government’s Idaho National Laboratory, said the kind of technology that Atalanta is making available will likely eventually become the standard for testing any new capability. “In a decade or two, I would expect it to be just part of the standard development tool kits,” Shannon added.

Shannon noted that the Defense Advanced Research Project Agency, or DARPA, has been investing billions in this technology for a couple of decades. This investment helped create the demand for a system like Argo. DARPA is the military’s cutting-edge research office, which also helped pioneer technologies such as the internet and stealth aircraft.

“They’ve probably invested well over $2 billion in various programs to advance formal methods ... and we’re finally seeing them start to come to fruition,” Shannon said. Last year, Emil Michael, the Pentagon’s chief technology officer, told a DARPA software conference in a prerecorded address that he saw the mathematics underpinning Atalanta's technology as the future of the military and he wanted it to “become the DoD’s gold standard" for cybersecurity.

Location: Iran
KONSTANTIN TOROPIN, Associated Press
strikeUnverifiedUSIsraelIran

US-Iran War Live: US weighs troop pullback from Gulf following damage in Iran war, report says

○ 1 source

Advertisement Middle East Crisis US-Iran War Live: US weighs troop pullback from Gulf following damage in Iran war, report says New Delhi,UPDATED: Aug 19, 2026 02:00 IST US-Iran War Live Updates: US President Donald Trump said on Tuesday that no talks with Iran were taking place or scheduled, while insisting that the Strait of Hormuz remained open.

"There are no talks or conversations going on, or scheduled, with the Islamic Republic of Iran. The Naval Blockade remains in full force and effect. The Hormuz Strait is open and operating. All water mines have been removed or detonated," Trump said on Truth Social.

Iran, however, maintained that the waterway would remain closed until Washington met conditions under an interim deal signed in June, including lifting the blockade on Iranian ports, removing oil sanctions, unfreezing Iranian assets and ending military operations.

The conflicting claims came as Jared Kushner, Trump’s son-in-law and special envoy, said on Monday that US-Iran contacts were "probably more robust than it's maybe ever been". Meanwhile, the UAE said it detected two ballistic missiles launched from Iran, which it assessed were targeting "maritime traffic".

Both missiles fell into the sea, according to the UAE Defence Ministry. Iran did not immediately comment. The incident was reported as a 60-day window for US-Iran peace talks expired without a breakthrough, raising fears of renewed escalation and further disruption to shipping through Hormuz.

The UAE had also recently accused Iran of attacking ADNOC vessels transiting the strait, although Tehran has not claimed responsibility. Follow indiatoday.in for live updates....Read More (Photo: X/@CENTCOM) 2 Aug 19, 2026 02:00 IST US Iran war: US weighs troop pullback from Gulf after Iran war damage, report says The US Defense Department is considering reducing its military presence in the Persian Gulf after its bases and facilities sustained damage during the war with Iran, The Washington Post reports.

The conflict has given Washington a “once-in-a-generation chance” to reassess its long-term military footprint in the Gulf, according to the report. One option under consideration is moving some US troops and military facilities further west, including to Jordan and Israel.

American refuelling aircraft have been stationed in Israel during the war. Aug 19, 2026 01:59 IST Middle East crisis: Here's what happened so far - US-Iran talks: Trump said no talks with Iran are underway or scheduled. - Trump on Hormuz: He said the Strait of Hormuz is open and operating, while the US naval blockade remains in force.

- Iran’s position: Top negotiator Mohammad Baqer Qalibaf said Hormuz will remain closed until US demands under the June interim deal are met. - Iran’s demands: Tehran wants the US to lift the blockade on its ports, remove oil sanctions, unfreeze Iranian assets and end military operations.

- Kushner’s account: Jared Kushner said on Monday that US-Iran contacts were “probably more robust than it’s maybe ever been.” - Talks stalled: A senior Iranian official said Tehran would shift to a “fully offensive” military posture as efforts to reach a permanent deal have stalled.

- UAE missile alert: The UAE said it detected two ballistic missiles launched from Iran. - Missiles fell at sea: The UAE Defence Ministry said both missiles fell into the sea and were assessed to have been targeting “maritime traffic.” - No Iranian claim: Iran has not immediately commented on the UAE's missile allegation.

- 60-day window expires: The missile incident followed the expiry of a 60-day window for US-Iran peace talks on Monday without a breakthrough. - UAE all-clear: The UAE earlier told residents the situation was safe and asked them to resume normal activities after the missile warning.

- ADNOC vessels: The UAE has accused Iran of attacking its state-owned ADNOC vessels transiting Hormuz. Iran has not claimed responsibility for those attacks.

Location: Iran
India Today News Desk