The Los Angeles Post
California & Local U.S. World Business Lifestyle
Today: January 21, 2025
Today: January 21, 2025

Top White House cyber aide says recent Iran hack on water system is call to tighten cybersecurity

United States Iran Hacking
December 08, 2023

WASHINGTON (AP) — A top White House national security official said recent cyber attacks by Iranian hackers on U.S. water authorities — as well as a separate spate of ransomware attacks on the health care industry — should be seen as a call to action by utilities and industry to tighten cybersecurity.

Deputy national security adviser Anne Neuberger said in an interview on Friday that recent attacks on multiple American organizations by the Iranian hacker group “Cyber Av3ngers" were “unsophisticated” and had “minimal impact” on operations. But the attacks, Neuberger said, offered a fresh warning that American companies and operators of critical infrastructure “are facing persistent and capable cyber attacks from hostile countries and criminals” that are not going away.

“Some pretty basic practices would have made a big difference there,” said Neuberger, who serves as a top adviser to President Joe Biden on cyber and emerging technology issues. “We need to be locking our digital doors. There are significant criminal threats, as well as capable countries — but particularly criminal threats — that are costing our economy a lot.”

The hackers, who U.S. and Israeli officials said are tied to Tehran's Islamic Revolutionary Guard Corps, breached multiple organizations in several states including a small municipal water authority in the western Pennsylvania town of Aliquippa. The hackers said they were specifically targeting organizations that used programmable logic controllers made by the Israeli company Unitronics, commonly used by water and water treatment utilities.

Matthew Mottes, the chairman of the Municipal Water Authority of Aliquippa, which discovered it had been hacked on Nov. 25, said that federal officials had told him the same group also breached four other utilities and an aquarium.

The Aliquippa hack prompted workers to temporarily halt pumping in a remote station that regulates water pressure for two nearby towns, leading crews to switch to manual operation.

The hacks, which authorities said began on Nov. 22, come as already fraught tensions between the U.S. and Iran have been heightened by the two-month-old Israel-Hamas war. The White House said that Tehran has supported Houthi rebels in Yemen who have carried out attacks on commercial vessels and have threatened U.S. warships in the Red Sea.

Iran is the chief sponsor of both Hamas, the militant group which controls Gaza, as well as the Houthi rebels in Yemen.

The U.S. has said they have uncovered no information that Iran was directly involved in Hamas' Oct. 7 attack on Israel that triggered the massive retaliatory operation by Israeli Defense Forces in Gaza. But the Biden administration is increasingly voicing concern about Iran attempting to broaden the Israeli-Hamas conflict through proxy groups and publicly warned Tehran about the Houthi rebels' attacks.

“They’re the ones with their finger on the trigger,” White House national security adviser Jake Sullivan told reporters earlier this week. “But that gun — the weapons here are being supplied by Iran. And Iran, we believe, is the ultimate party responsible for this.”

Neuberger declined to comment on whether the recent cyber attack by the Iranian hacker group could portend more hacks by Tehran on U.S. infrastructure and companies. Still, she said the moment underscored the need to step up cybersecurity efforts.

The Iranian “Cyber Av3ngers” attack came after a federal appeals court decision in October prompted the EPA to rescind a rule that would have obliged U.S public water systems to include cybersecurity testing in their regular federally mandated audits. The rollback was triggered by a federal appeals court decision in a case brought by Missouri, Arkansas and Iowa, and joined by a water utility trade group.

Neuberger said that measures spelled out in the scrapped rule to beef up cybersecurity for water systems could have "identified vulnerabilities that were targeted in recent weeks.”

The administration, earlier this year, unveiled a wide-ranging cybersecurity plan that called for bolstering protections on critical sectors and making software companies legally liable when their products don’t meet basic standards.

Neuberger also noted recent criminal ransomware attacks that have devastated health care systems, arguing those attacks spotlight the need for government and industry to take steps to tighten cyber security.

A recent attack targeting Ardent Health Services prompted the health care chain that operates 30 hospitals in six states to divert patients from some of its emergency rooms to other hospitals while postponing certain elective procedures. Ardent said it was forced to take its network offline after the Nov. 23 cyberattack.

A recent global study by the cybersecurity firm Sophos found nearly two-thirds of health care organizations were hit by ransomware attacks in the year ending in March, double the rate from two years earlier but dipping slightly from 2022.

“The president’s made it a priority. We’re pushing out actionable information. We’re pushing out advice,” Neuberger said. “And we really need the partnership of state and local governments and of companies who are operating critical services to take and implement that advice quickly.”

Associated Press writers Frank Bajak in Boston and Marc Levy in Harrisburg, Pa., contributed reporting.

Related

Local|News

More Santa Ana winds test L.A. fire containment lines

Another Day of Santa Ana Winds Tests Fire Containment Lines

More Santa Ana winds test L.A. fire containment lines
Local|News

Palisades Fire reaches 19% containment as Santa Ana winds continue

Containment of Palisades Fire Rises to 19%

Palisades Fire reaches 19% containment as Santa Ana winds continue
Local|News

Eaton Fire reaches 45% containment; Santa Ana winds continue

Eaton Fire 45% Contained; Santa Ana Winds Prompt Red Flag Warning

Eaton Fire reaches 45% containment; Santa Ana winds continue
Local|Crime|News|Political|US

LA County Defends Decision Not to Evacuate Juvenile Hall

Following some public criticism about the county's decision not to evacuate Barry J. Nidorf Juvenile Hall in Sylmar as the nearby Hurst Fire raged, county Probation Department officials insisted Tuesday they were prepared to act and kept detainees safe, but the facility never fell under a mandatory evacuation order.

LA County Defends Decision Not to Evacuate Juvenile Hall
Share This

Popular

Arts|Celebrity|Entertainment|Local|News|US|WrittenByLAPost

David Lynch, director of “Twin Peaks” and “Mulholland Drive” dead at 78

David Lynch, director of “Twin Peaks” and “Mulholland Drive” dead at 78
Local|News

New laws target street racing, reckless driving in California

New laws target street racing, reckless driving in California
News|Local

Red flag conditions expire in Southern California fire areas

Red flag conditions expire in Southern California fire areas
Crime|Environment|US

Containment of Palisades Fire Rises to 22%

Containment of Palisades Fire Rises to 22%

Thanks for reading The Los Angeles Post

Create your free account or log in to continue reading.

Already have an account? Sign In