Multistate Water System Attacks Widen, Iran Suspected           (https://www.darkreading.com/ics-ot-security/multistate-water-system-attacks-widen-iran-suspected)  (https://eu-images.contentstack.com/v3/assets/blt6d90778a997de1cd/bltfab47f61ab6fce61/6a7a20f413d9fd35582fc0f9/Engineer_checks_water_quality-DSCimage-GettyImages-1369464717.jpg?width=1280&auto=webp&quality=10&disable=upscale&blur=40)  (/assets/brand.generated-DvWgocOf.css)  (https://fonts.googleapis.com/css2?family=Inter:wght@100;200;300;400;500;600;700;800;900&display=swap)  (https://fonts.googleapis.com/css2?family=Inter:wght@100;200;300;400;500;600;700;800;900&display=swap)  (https://cdn.cookielaw.org)  (https://fonts.gstatic.com)  (https://fonts.googleapis.com)  (https://www.googletagmanager.com)   (/assets/informaLogoCross-SPlaD0EU.png)  (https://eu-images.contentstack.com/v3/assets/blt6d90778a997de1cd/bltfab47f61ab6fce61/6a7a20f413d9fd35582fc0f9/Engineer_checks_water_quality-DSCimage-GettyImages-1369464717.jpg?width=1280&auto=webp&quality=80&disable=upscale)  (/assets/entry.client-8yQsrphY.js)  (/assets/react-AhCJBOvU.js)  (/assets/react-dom-BaWrWoik.js)  (/assets/jsx-runtime-Bf1vHdIk.js)  (/assets/preload-helper-BwtgeoTp.js)  (/assets/root-CK1_WCW2.js)  (/assets/src-Cg3mMzdb.js)  (/assets/errorBoundary-DKs9pnHu.js)  (/assets/src-vhrkDmUk.js)  (/assets/src-BRwu0g6W.js)  (/assets/meta-DoIDRP3T.js)  (/assets/src-B-85kwV9.js)  (/assets/src-BBsyl6Bs.js)  (/assets/src-MlFiplQO.js)  (/assets/src-BkgxqQk1.js)  (/assets/src-bhJBxd6z.js)  (/assets/extends-BzX1mckK.js)  (/assets/src-Bh5thOUl.js)  (/assets/index.es-Cjlrw4i2.js)  (/assets/esm-eRXVs2qm.js)  (/assets/src-4TvyfZgj2.js)  (/assets/src-CQ75ah2G2.js)  (/assets/_baseForOwn-0oiOjHh4.js)  (/assets/src-NTVdfYOl.js)  (/assets/useLockBodyScroll-DCtzFKVF.js)  (/assets/useIsomorphicLayoutEffect-C0bSXeRj.js)  (/assets/striptags-bg-MK5qB.js)  (/assets/swiper-react-CGZaYDok.js)  (/assets/src-DWp1Ifbj2.js)  (/assets/src-BfyPxy1P.js)  (/assets/src-WVeDzase.js)  (/assets/src-CppCkVic2.js)  (/assets/src-BusmR0rk.js)  (/assets/src-CdDqCGnn.js)  (/assets/src-DYEQSI2E.js)  (/assets/toNumber-DPLX917t.js)  (/assets/src-DdzLJmKL.js)  (/assets/src-DFCss7Jw.js)  (/assets/src-BELhJ1DS.js)  (/assets/src-CRJXvDWq2.js)  (/assets/src-D5CxgRVI.js)  (/assets/_topic._slug._index-CQtqM_IB.js)  (/assets/_topic._slug._index-B-7igQTg.js)  (/assets/src-BJu9KsXh.js)  (/assets/src-w_r3Pq_8.js)  (/assets/string-CJA2-WcC.js)  (/assets/src-DgJrxS5K.js)  (/assets/src-BzznOpQ9.js)  (/assets/src-CGxaCz5P.js)  (/assets/src-D3WzECrZ2.js)   (gtm noscript 0)  (gtm noscript 1)       (https://www.informatechtarget.com/) (Informa Logo)  Informa TechTarget |  (SearchSecurity) (https://www.techtarget.com/searchsecurity/) SearchSecurity (Cybersecurity Dive) (https://www.cybersecuritydive.com/) Cybersecurity Dive (InformationWeek) (https://www.informationweek.com/) InformationWeek (Channel Dive) (https://www.channeldive.com/) Channel Dive   (https://www.informatechtarget.com/our-brands/) Explore our brands   (https://www.informatechtarget.com/) An Informa TechTarget Publication        (/resources) Dark Reading Resource Library (/program/black-hat) Black Hat News (/program/omdia-cybersecurity) Omdia Cybersecurity (https://www.informatechtarget.com/media-kit/dark-reading/) Advertise              (/) (Dark Reading Logo) (Dark Reading Logo)    (https://dr-resources.darkreading.com/c/pubRD.mpl?secure=1&sr=pp&_t=pp:&qf=w_defa3135&ch=drwebbutton)  Newsletter Sign-Up   (https://twitter.com/DarkReading)    (https://www.linkedin.com/company/dark-reading/)    (https://www.facebook.com/darkreadingcom/)    (https://bsky.app/profile/darkreading.bsky.social)    (https://www.instagram.com/darkreading_/#)    (https://www.youtube.com/@DarkReadingOfficialYT)    (/rss.xml)    (https://news.google.com/publications/CAAqKggKIiRDQklTRlFnTWFoRUtEMlJoY210eVpXRmthVzVuTG1OdmJTZ0FQAQ?ceid=US:en&oc=3)     (https://dr-resources.darkreading.com/c/pubRD.mpl?secure=1&sr=pp&_t=pp:&qf=w_defa3135&ch=drwebbutton)  Newsletter Sign-Up                   Cybersecurity Topics   Related Topics (/application-security) Application Security  (/cybersecurity-operations/cybersecurity-careers) Cybersecurity Careers  (/cloud-security) Cloud Security  (/cyber-risk) Cyber Risk  (/cyberattacks-data-breaches) Cyberattacks & Data Breaches  (/cybersecurity-analytics) Cybersecurity Analytics  (/cybersecurity-operations) Cybersecurity Operations  (/cyber-risk/data-privacy) Data Privacy  (/endpoint-security) Endpoint Security  (/ics-ot-security) ICS/OT Security   (/cybersecurity-operations/identity-access-management-security) Identity & Access Mgmt Security  (/vulnerabilities-threats/insider-threats) Insider Threats  (/ics-ot-security/iot) IoT  (/endpoint-security/mobile-security) Mobile Security  (/cybersecurity-operations/perimeter) Perimeter  (/cybersecurity-operations/physical-security) Physical Security  (/endpoint-security/remote-workforce) Remote Workforce  (/threat-intelligence) Threat Intelligence  (/vulnerabilities-threats) Vulnerabilities & Threats     Recent in Cybersecurity Topics  (/vulnerabilities-threats/zimbra-flaw-exploitation-shrinking-window-patch) (The word "Zimbra" surrounded by various business-related illustrations.) (The word "Zimbra" surrounded by various business-related illustrations.)    (/vulnerabilities-threats) Vulnerabilities & Threats (/vulnerabilities-threats/zimbra-flaw-exploitation-shrinking-window-patch) Exploited Zimbra Flaw Highlights Shrinking Window to Patch (/vulnerabilities-threats/zimbra-flaw-exploitation-shrinking-window-patch) Exploited Zimbra Flaw Highlights Shrinking Window to Patch by (/author/jai-vijayan) Jai Vijayan    Aug 24, 2026 4 Min Read       (/application-security/owasp-flags-top-ai-skill-risks-security-blueprint) (Agentic skills risks OWASP purple Universal Format) (Agentic skills risks OWASP purple Universal Format)    (/application-security) Application Security (/application-security/owasp-flags-top-ai-skill-risks-security-blueprint) OWASP Flags Top AI Skill Risks in New Security Blueprint (/application-security/owasp-flags-top-ai-skill-risks-security-blueprint) OWASP Flags Top AI Skill Risks in New Security Blueprint by (/author/robert-lemos) Robert Lemos    Aug 21, 2026 6 Min Read              World    Related Topics (/program/dr-global) DR Global  (/keyword/asia-pacific) Asia Pacific  (/keyword/europe) Europe   (/keyword/latin-america) Latin America  (/keyword/middle-east-africa) Middle East & Africa     Recent in (/program/dr-global) World   (/program/dr-global) See All     (/cyberattacks-data-breaches/scottish-govt-data-breach-prosecutors-office) (A foggy street in Edinburgh.) (A foggy street in Edinburgh.)    (/cyberattacks-data-breaches) Cyberattacks & Data Breaches (/cyberattacks-data-breaches/scottish-govt-data-breach-prosecutors-office) Scottish Govt Suffers Potentially Widening Data Breach at Prosecutor's Office (/cyberattacks-data-breaches/scottish-govt-data-breach-prosecutors-office) Scottish Govt Suffers Potentially Widening Data Breach at Prosecutor's Office by (/author/nate-nelson) Nate Nelson    Aug 14, 2026 4 Min Read              (/program/the-edge) The Edge  (/program/dr-technology) DR Technology  Events   Related Topics (/events) Upcoming Events  (/podcasts) Podcasts   (/resources?types=Webinar) Webinars     (/events) SEE ALL          Resources   Related Topics (/resources) Resource Library  (/resources?types=Whitepaper) White Papers  (/resources?page=1&types=digital+editorial+content&types=report) Reports  (/resources?types=Webinar) Webinars  (/resources?q=newsletter) Newsletters  (/podcasts) Podcasts  (/keyword/heard-it-from-a-ciso) Heard It From a CISO  (/series/reporters-notebook) Reporters' Notebook   (/program/darkreading-20th-anniversary) Dark Reading's 20th  (/videos) Videos  (/dark-reading-polls) Dark Reading Polls  (/partner-perspectives) Partner Perspectives  (/author) Meet the Editors  (https://www.informatechtarget.com/media-kit/dark-reading/) Advertise With Us  (/about-us) About Us     (/resources) Dark Reading Resource Library                         (/ics-ot-security) ICS/OT Security  (/cybersecurity-operations/physical-security) Physical Security  (/cyberattacks-data-breaches) Cyberattacks & Data Breaches  (/vulnerabilities-threats) Vulnerabilities & Threats  (/latest-news) News   Multistate Water System Attacks Widen, Iran Suspected  Attacks targeting water systems just keep flowing across a dozen states, against ill-secured, Internet-exposed PLCs.    (/author/alexander-culafi) (Picture of Alexander Culafi) (Picture of Alexander Culafi)    (/author/alexander-culafi) Alexander Culafi, Senior News Writer, Dark Reading August 10, 2026    4 Min Read   (An engineer in a green safety vest standing on a bridge at a wastewater treatment plant.) (An engineer in a green safety vest standing on a bridge at a wastewater treatment plant.)   Source: DSCimage via Getty Images    (https://www.linkedin.com/sharing/share-offsite/?url=https://www.darkreading.com/ics-ot-security/multistate-water-system-attacks-widen-iran-suspected)    (http://www.facebook.com/sharer/sharer.php?u=https://www.darkreading.com/ics-ot-security/multistate-water-system-attacks-widen-iran-suspected)    (http://www.twitter.com/intent/tweet?url=https://www.darkreading.com/ics-ot-security/multistate-water-system-attacks-widen-iran-suspected)    (https://www.reddit.com/submit?url=https://www.darkreading.com/ics-ot-security/multistate-water-system-attacks-widen-iran-suspected&title=Multistate%20Water%20System%20Attacks%20Widen%2C%20Iran%20Suspected)    (https://bsky.app/intent/compose?text=Multistate%20Water%20System%20Attacks%20Widen%2C%20Iran%20Suspected%20-%20https%3A%2F%2Fwww.darkreading.com%2Fics-ot-security%2Fmultistate-water-system-attacks-widen-iran-suspected)    (/cdn-cgi/l/email-protection#0a35797f68606f697e37477f667e63797e6b7e6f2a5d6b7e6f782a5973797e6f672a4b7e7e6b6961792a5d636e6f64262a43786b642a597f797a6f697e6f6e2c6b677a3168656e7337432f383a7e62657f6d627e2f383a7e626f2f383a6c656666657d63646d2f383a6c7865672f383a4e6b78612f383a586f6b6e63646d2f383a67636d627e2f383a63647e6f786f797e2f383a73657f242f3a4e2f3a4b2f3a4e2f3a4b2f383a477f667e63797e6b7e6f2f383a5d6b7e6f782f383a5973797e6f672f383a4b7e7e6b6961792f383a5d636e6f642f38492f383a43786b642f383a597f797a6f697e6f6e2f3a4e2f3a4b627e7e7a792f394b2f384c2f384c7d7d7d246e6b7861786f6b6e63646d246965672f384c63697927657e27796f697f78637e732f384c677f667e63797e6b7e6f277d6b7e6f78277973797e6f67276b7e7e6b696179277d636e6f642763786b6427797f797a6f697e6f6e)     Cyberattacks against water and wastewater systems  (https://abcnews.com/US/12-states-face-cyberattacks-water-systems-sources/story?id=135348482) reportedly  have reached at least a dozen states, with threat actors exploiting low-complexity attacks against industrial controllers. The intrusions, possibly linked to the Iranian government, prove the US's water infrastructure remains dangerously exposed.  In recent weeks, water and wastewater organizations associated several US states have disclosed cyberattacks against their systems. Minnesota  (/ics-ot-security/minnesota-water-utility-attacks-expose-sector-cyber-risks) was the first  to confirm such attacks late last month, saying that cyberattackers targeted operational technology (OT) systems for more than 30 water systems. Around the same time on July 30, the Cybersecurity and Infrastructure Security Agency (CISA) updated an earlier advisory warning of "a significant increase in cyber-threat actors targeting programmable logic controllers (PLCs) in the  (https://www.cybersecuritydive.com/news/water-cybersecurity-mdr-services-def-con-franklin/827449/) Water and Wastewater Systems (WWS) Sector  ."  The US cyber agency said threat actors were modifying PLC passwords to lock out operators and also disconnecting PLCs by changing their IP addresses. "CISA urges critical infrastructure owners, operators, and integrators to remove publicly exposed PLCs and other OT from the Internet as soon as possible," CISA said at the time.  Related: (/ics-ot-security/how-emerging-industrial-protocol-family-put-ot-at-risk) How an Emerging Industrial Protocol Family Could Put OT at Risk  This CISA advisory followed the FBI, updating an  (https://www.techtarget.com/cybersecurity/news/366641657/News-brief-Iranian-cyberattacks-target-US-water-energy) April  warning on July 22 that  (https://www.ic3.gov/CSA/2026/260722.pdf) Iranian threat actors  are targeting PLCs in critical infrastructure manufactured by Rockwell Automation/Allen-Bradley, Schneider Electric, Siemens, and possibly other vendors.  It's not just Minnesota. Relevant municipal and local water officials from Georgia, Michigan, and South Dakota have also suffered attacks that appear to be connected with this wider campaign. And in recent days, Alabama and New Jersey communities have similarly confirmed attacks.  Modernize to Stem the Flow of Water Sector Disruptions So far there's been no disruption to the water supply, and these PLC attacks appear to be intended to stoke fear rather than carry out permanent damage or extortion, at least to public knowledge.  That's not to say that disruption isn't happening. Some of the attacks to date, such as the ones in Minnesota, involved locking local operators out of PLCs while disrupting visibility and control functions, forcing operators to use manual workarounds. South Dakota- and Michigan-targeted attacks appeared to be consistent with this. The most severe activity known to date involved Georgia, where cyber activity against Clayton County  (https://www.cbsnews.com/news/more-states-water-systems-cyberattacks-iran-backed-hackers/) reportedly  caused a water pressure drop and forced the agency to issue a boil water advisory.  Related: (/ics-ot-security/minnesota-water-utility-attacks-expose-sector-cyber-risks) Minnesota Water Utility Attacks Expose Sector's Cyber-Risks  John Gallagher, vice president at OT and Internet of Things security firm Viakoo, says industrial controllers like PLCs were historically engineered for physical isolation and reliability rather than Internet exposure, meaning that many lack basic secure-by-design capabilities like multifactor authentication (MFA) or encrypted communication.  "Like many OT and IoT systems, they may have built-in networking that is turned on by default unless it is disabled during installation," he tells Dark Reading. "This is compounded by maintenance, which often is done by non-IT staff; field technicians and third-party integrators frequently install cellular modems, satellite links, or direct port forwards to allow remote troubleshooting without notifying central IT/OT teams."  Markus Mueller, field CISO at Nozomi Networks, similarly says that PLCs are common targets because of the reality behind how the water and wastewater industry operates.  "There are roughly 170,000 drinking water and wastewater systems, and most are small, decentralized, and running OT that was installed by a third party," he explains. "Cyber awareness and capabilities are limited at these utilities. There is an operational need for these devices to be connected, but there's also a lack of funding, mandate, or awareness to keep them secure. It is unfortunate, as there are plenty of good people in the water industry who work hard to deliver clear, reliable water, but they are not cyber people. And even if they are aware of the issue, they often can’t get the budget or resources to set up these systems properly."  Related: (/ics-ot-security/iran-russia-china-target-water-systems-sabotage) Iran, Russia, China Target Water Systems for Sabotage  Is Iran Turning on the Utility Cyberattack Taps? While there has been no definitive attribution regarding who's behind the offensive, one possible culprit  (https://www.cbsnews.com/news/more-states-water-systems-cyberattacks-iran-backed-hackers/) is the pro-Iran CyberAv3ngers  hacktivist group, which has hit US water infrastructure before, according to a  (https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-335a) CISA alert from 2023 and 2024  .  (/ics-ot-security/iran-russia-china-target-water-systems-sabotage) Researchers have previously  called the group opportunistic and propagandistic in nature, leaning on lower-stakes attacks to stoke public fear and gain media attention. Attacks like this are closer to hacktivism in nature — as if the threat actor is trying to say, "We can get to you."  That said, several cybersecurity firms and researchers have noted similarities between the recent PLC-targeting campaign and previous operations attributed to the  (https://www.levelblue.com/blogs/spiderlabs-blog/review-of-the-july-2026-cyberattacks-against-u.s.-water-and-wastewater-systems) Iranian Revolutionary Guard Corps (IRGC)  and/or the  (https://blackswan-cybersecurity.com/threat-advisory-iranian-affiliated-cyber-operations-targeting-u-s-water-energy-and-critical-infrastructure-sectors-july-27-2026/) IRGC-linked CyberAv3ngers  group, though federal authorities have not publicly attributed the latest multistate water-sector intrusions to either.  Mueller tells Dark Reading that a lack of sophistication in tradecraft does not necessarily mean the adversary is not capable of more.  "Adversaries will deploy the tactics, techniques, and procedures [TTPs] that are needed to meet the objective they have," he says. "The scale and coordination required for this campaign point to a well-organized adversary that likely is technically capable of more. Based on this, I assess with moderate confidence that the adversary is focused on a widespread disruption and causing pain to operators and responders. In a lot of ways, this aligns with the hacktivist playbook we have seen, but the missing component is the claims of responsibility and, frankly, the marketing from the adversary."    (https://www.linkedin.com/sharing/share-offsite/?url=https://www.darkreading.com/ics-ot-security/multistate-water-system-attacks-widen-iran-suspected)    (http://www.facebook.com/sharer/sharer.php?u=https://www.darkreading.com/ics-ot-security/multistate-water-system-attacks-widen-iran-suspected)    (http://www.twitter.com/intent/tweet?url=https://www.darkreading.com/ics-ot-security/multistate-water-system-attacks-widen-iran-suspected)    (https://www.reddit.com/submit?url=https://www.darkreading.com/ics-ot-security/multistate-water-system-attacks-widen-iran-suspected&title=Multistate%20Water%20System%20Attacks%20Widen%2C%20Iran%20Suspected)    (https://bsky.app/intent/compose?text=Multistate%20Water%20System%20Attacks%20Widen%2C%20Iran%20Suspected%20-%20https%3A%2F%2Fwww.darkreading.com%2Fics-ot-security%2Fmultistate-water-system-attacks-widen-iran-suspected)    (/cdn-cgi/l/email-protection#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)      About the Author (/author/alexander-culafi) (Alexander Culafi) (Alexander Culafi)    (/author/alexander-culafi) Alexander Culafi   Senior News Writer, Dark Reading  Alex is an award-winning writer, journalist, and podcast host based in Boston. After cutting his teeth writing for independent gaming publications as a teenager, he graduated from Emerson College in 2016 with a Bachelor of Science in journalism. He has previously been published on VentureFizz, Search Security, Nintendo World Report, and elsewhere.  At Dark Reading, he covers a variety of cybersecurity topics, including the cybercrime ecosystem, open source security, and the intersection between AI and threat actors. In his spare time, Alex hosts the weekly Nintendo podcast, "Talk Nintendo Podcast," and works on personal writing projects, including two previously self-published science fiction novels.  He has received numerous awards, including TechTarget's Writer of the Year in 2022 as well as more than 10 Azbee awards for his reporting between 2022 and today.     (/author/alexander-culafi) See more from Alexander Culafi         (https://google.com/preferences/source?q=https://www.darkreading.com/) (Add us as a Preferred Source on Google) (Add us as a Preferred Source on Google)    Want more Dark Reading stories in your Google search results? (https://google.com/preferences/source?q=https://www.darkreading.com/) Add Us Now    More Insights    Industry Reports  (https://dr-resources.darkreading.com/c/pubRD.mpl?qf=w_sysf19&ch=mod) The State of Cloud Security: The Latest Challenges   (https://dr-resources.darkreading.com/c/pubRD.mpl?qf=w_forq296&ch=mod) How Organizations Are Managing Incident Response   (https://dr-resources.darkreading.com/c/pubRD.mpl?qf=w_defa10666&ch=mod) How Enterprises Are Developing Secure Applications   (https://dr-resources.darkreading.com/c/pubRD.mpl?qf=w_darl22&ch=mod) Inside RSAC 2026: security leaders reveal the risks redefining your defense strategy   (https://dr-resources.darkreading.com/c/pubRD.mpl?qf=w_darl25&ch=mod) Essential News & Insights from Black Hat USA 2025    (/resources?page=1&types=Report&types=Research+Report) Access More Research        Webinars  (https://dr-resources.darkreading.com/c/pubRD.mpl?qf=w_defa11519&ch=mod) What Every Enterprise Should Know About Securing Cloud Assets In the Age of AI   (https://dr-resources.darkreading.com/c/pubRD.mpl?qf=w_knoc117&ch=mod) The Dos and Don'ts of a Cybersecurity Awareness Month People Actually Remember   (https://dr-resources.darkreading.com/c/pubRD.mpl?qf=w_defa11472&ch=mod) Building a Secure AI Strategy for the Enterprise   (https://dr-resources.darkreading.com/c/pubRD.mpl?qf=w_blag48&ch=mod) Is your AppSec program Mythos Ready?   (https://dr-resources.darkreading.com/c/pubRD.mpl?qf=w_defa11407&ch=mod) Experts Explain How to Develop a Framework for Cyber-Fraud Fusion    (/resources?types=Webinar) More Webinars              Featured (Black-hat-2026.png) (Black-hat-2026.png)   Check out the  (https://www.techtarget.com/cybersecurity/conference/Black-Hat-2026-Key-news-takeaways-and-security-trends) Black Hat USA 2026 Conference Guide  for coverage and intel from — and about — the show!     Editor's Choice  (/cyber-risk/delta-flight-disrupted-wi-fi-hack) (A Delta 737 taking off in Las Vegas.) (A Delta 737 taking off in Las Vegas.)    (/cyber-risk) Cyber Risk (Link to all video) (/cyber-risk/delta-flight-disrupted-wi-fi-hack)   (/cyber-risk/delta-flight-disrupted-wi-fi-hack) What We Missed: Delta Flight Disrupted With Wi-Fi Hack (/cyber-risk/delta-flight-disrupted-wi-fi-hack) What We Missed: Delta Flight Disrupted With Wi-Fi Hack by (/author/robert-wright) Rob Wright, (/author/alexander-culafi) Alexander Culafi    Aug 20, 2026      (/cyberattacks-data-breaches/agentic-ai-new-insider-threat-model) (Rob Wright and Katie Moussouris sitting at the Dark Reading News Desk.) (Rob Wright and Katie Moussouris sitting at the Dark Reading News Desk.)    (/cyberattacks-data-breaches) Cyberattacks & Data Breaches (Link to all videoshowcase) (/cyberattacks-data-breaches/agentic-ai-new-insider-threat-model)   (/cyberattacks-data-breaches/agentic-ai-new-insider-threat-model) Agentic AI Presents New Insider Threat Model for Orgs (/cyberattacks-data-breaches/agentic-ai-new-insider-threat-model) Agentic AI Presents New Insider Threat Model for Orgs  Aug 19, 2026          Want more Dark Reading stories in your Google search results?  (https://google.com/preferences/source?q=https://www.darkreading.com/) (Add as a Preferred Source on Google) (Add as a Preferred Source on Google)        Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.  (https://dr-resources.darkreading.com/c/pubRD.mpl?secure=1&sr=pp&_t=pp:&qf=w_defa3135&ch=drwebbutton) Subscribe       (Embedded content)     (Embedded content)      (Embedded content)             (/) (Dark Reading Logo) (Dark Reading Logo)    Discover More (/program/black-hat) Black Hat (/program/omdia-cybersecurity) Omdia   Working With Us (/about-us) About Us (/author) Meet the Editors (/advertise) Advertise (https://info.wrightsmedia.com/informa-licensing-reprints-request) Reprints   Join Us  (https://dr-resources.darkreading.com/c/pubRD.mpl?secure=1&sr=pp&_t=pp:&qf=w_defa3135&ch=drwebbutton) Newsletter Sign-Up      Follow Us (https://twitter.com/DarkReading)    (https://www.linkedin.com/company/dark-reading/)    (https://www.facebook.com/darkreadingcom/)    (https://bsky.app/profile/darkreading.bsky.social)    (https://www.instagram.com/darkreading_/#)    (https://www.youtube.com/@DarkReadingOfficialYT)    (/rss.xml)    (https://news.google.com/publications/CAAqKggKIiRDQklTRlFnTWFoRUtEMlJoY210eVpXRmthVzVuTG1OdmJTZ0FQAQ?ceid=US:en&oc=3)       (https://www.informa.com) (Informa) (Informa)    Copyright © 2026 TechTarget, Inc. d/b/a Informa TechTarget. This website is owned and operated by Informa TechTarget, part of a global network that informs, influences and connects the world’s technology buyers and sellers. All copyright resides with them. Informa PLC’s registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. TechTarget, Inc.’s registered office is 275 Grove St. Newton, MA 02466. (https://www.informatech.com/) Home|  (https://www.informatechtarget.com/privacy-policy/#cookies) Cookie Policy|  (https://www.informatechtarget.com/privacy-policy) Privacy|  (https://www.informatechtarget.com/terms-and-conditions/) Terms of Use    ()  Your Privacy Choices