Water system controllers don't belong on the internet, says ex-NSA chief after suspected Iran attacks
Why it matters — For engineers who build or operate industrial control systems, the message is that internet-reachable PLCs are being framed as indefensible, not merely risky, and that the remediation path leans heavily on volunteer and open-source efforts because the affected water sector is too under-resourced to do it alone. The attribution to Iran is still unofficial, which means incident response coordination has to proceed without confirmed state-level naming, complicating any defensive mandate that depends on it.