My Dashboard

Spotlight

Situation Report: Heightened Threat Environment – Potential Retaliation by Iranian Threat Actors Following U.S. Strikes on Iran (Updated April 2, 2026)

(TLP:AMBER+STRICT) The joint U.S.-Israeli military operation against Iran is now in its fifth week. Since the previous Iran update, WaterISAC received more reports of continuing cyber and physical security threats to critical infrastructure related to the conflict, including a (TLP:AMBER+STRICT) Malware Analysis Report (MAR) related to Iranian APT activity…

Now Available: Quarterly Water Sector Incident Summary for October to December 2025

(TLP:AMBER) WaterISAC’s latest “Quarterly Water Sector Incident Summary” report, presenting information on incidents and suspicious activities at water and wastewater utilities between October and December 2025, is now available. The Executive Summary one-pager is also ideal for sharing with non-technical staff and leadership to quickly align on current threats and mitigation actions...

General Security and Resilience

(TLP:AMBER+STRICT) Situation Report: Heightened Threat Environment – Potential Retaliation by Iranian Threat Actors Following U.S. Strikes on Iran (Updated April 3, 2026)

(TLP:CLEAR) Security Preparedness – Vulnerabilities in Commercial Electronic Locks and Considerations to Protect Sensitive Information

(TLP:CLEAR) Institute for Economics and Peace – Global Terrorism Report and Special Iran Terror Threat Supplement

(TLP:AMBER) Fusion Center Report – Critical Infrastructure Remains an Attractive Target for Domestic Violent Extremists

(TLP:CLEAR) Supplemental General Security & Resilience Highlights – April 2, 2026

(TLP:AMBER) March 31, 2026 WaterISAC Members Only Meeting

(TLP:CLEAR) WaterISAC’s Quarterly Water Sector Incident Summary, October to December 2025 – Executive Summary

(TLP:AMBER) WaterISAC’s Quarterly Water Sector Incident Summary, October to December 2025

Cybersecurity

(TLP:AMBER) U.S. Water Treatment Plant SCADA System Impacted by Ransomware

(TLP:AMBER) Member Reported Incident – “Device Code” Phishing Attempt

(TLP:AMBER) Helpful Questions and Answers from Last Month’s Infraguard Event – A.I.-Enhanced Cyber Attacks: Securing Critical Infrastructure

(TLP CLEAR) Weekly Vulnerabilities to Prioritize – April 2, 2026

(TLP:CLEAR) CISA ICS Advisories, Additional Alerts, Updates, and Bulletins – April 2, 2026

(TLP:CLEAR) Critical RCE Vulnerability in F5 Big-IP APM Under Active Exploitation (CVE-2025-53521)

WaterISAC Events

Water Sector Physical Threat Briefing

Water Sector Cyber Resilience Briefing

Water Sector Natural Disaster Threat Briefing

H2OSecCon- Virtual Conference

H2OEx- Camden, NJ

H2OEx- Chicago, IL