LevelBlue SpiderLabs has published an analysis of coordinated cyberattacks that targeted US water and wastewater systems throughout July 2026, focusing on how attackers compromised operational technology (OT) environments across multiple states.
According to the review, the campaign targeted OT systems supporting water and wastewater facilities across multiple US states, with attackers exploiting internet-exposed industrial control systems rather than using sophisticated zero-day vulnerabilities.
The analysis points to recurring security weaknesses and argues the incidents reinforce the importance of securing remote access, segmenting OT networks, and reducing internet exposure for critical systems. It also notes that many affected organisations were able to maintain safe operations by switching to manual processes, which it says demonstrates the value of resilience planning.
SpiderLabs also highlights the broader implications for critical infrastructure operators, describing the attacks as part of a growing cyber risk landscape that increases the need for continuous monitoring and threat-informed defence.
The full analysis is available at: https://www.levelblue.com/blogs/spiderlabs-blog/review-of-the-july-2026-cyberattacks-against-u.s.-water-and-wastewater-systems
