Operational Technology Security Risks Rise Amid Nation‑State Threats and New US Regulations

Nation‑state actors from Iran, Russia and China are intensifying attacks on water and wastewater facilities, exploiting weak passwords and exposed control systems. Recent CISA advisories flag critical flaws in Daktronics highway‑sign controllers, a remote‑code execution bug in PTC Windchill and FlexPLM, and an unpatched deserialization vulnerability in Delta Electronics' DTM Soft used in industrial temperature controllers. Nozomi Networks has introduced an AI‑driven threat‑intelligence engine to detect emerging OT/IoT malware.

The U.S. Department of Homeland Security issued new cybersecurity regulations for critical‑infrastructure operators, mandating stronger safeguards and incident reporting. A major Midwestern energy provider suffered a ransomware‑linked outage, while a separate ransomware group breached a manufacturing firm, leaking data after exploiting OT vulnerabilities. Security researchers also disclosed high‑severity bugs in widely used industrial‑control software, urging immediate patching.