Critical Infrastructure and OT Attacks

Persistent OT attacks: water system attacks in Michigan confirmed with PLC targeting and Iranian attribution; 52% of water systems lack email authentication. Suisun City, California declared a state of emergency after a cyberattack disrupted 911 routing; federal investigation underway, funding concerns. The zero-day email threat lifecycle now shows negative 7-day MTTE, with 90 zero-days in 2025. TA488 OWAReaper targets government and critical sectors with sophisticated in-browser credential harvesting.