💧 Water Security theater

Protects water security: cyberattacks on water and wastewater treatment OT, plus transboundary water conflict over rivers, dams, and aquifers. It matters because small, under-resourced utilities running exposed PLCs are soft targets whose compromise threatens public health, while upstream diversion fuels interstate tension.

🏹 Threat Actors

🦠 Malware & Tools

🛡 Exploited Vulnerabilities

🧭 Intelligence disciplines

📚 Priority sources & datasets

📜 Water Security Playbook

1. Collect exposed HMI/PLC scan data (notably Unitronics and other internet-facing controllers) and utility-targeting actor indicators
2. Enrich against known water-sector malware and default-credential/CVE exposure, and map transboundary basin stress with geospatial data
3. Analyze intrusions for capability to alter chemical dosing or setpoints, and assess basin disputes for escalation potential
4. Attribute cyber activity to IRGC-linked or state actors via toolmarks and hacktivist claims, and identify upstream state actions in water disputes
5. Notify affected water utilities and sector ISACs with detections, hardening steps, and manual-override safeguards
6. Coordinate remediation and threat hunting for cyber cases and feed diplomatic early warning for water-conflict flashpoints

⚡ AI Skills & Automation

Automate unattended via the cron pipeline (collect → ingest → resolve → enrich → score → alert).

🗃 Data Management

🧩 Advanced Capabilities

🔗 Cross-domain pivots