Current Cybersecurity Threats to US Critical Infrastructure

Cybersecurity Advisory: Pro-Russia Hacktivists Conduct Opportunistic Attacks Against US and Global Critical Infrastructure

December 10, 2025 - The latest Joint Cybersecurity Advisory (JCSA) reports that pro-Russia hacktivist groups are currently conducting lower-impact but persistent cyberattacks targeting critical infrastructure. These attacks often exploit minimally secured, internet-facing virtual network computing (VNC) connections to access operational technology (OT) control devices—including those used in water and wastewater systems.

Water and wastewater utilities should review the advisory and implement the top recommended actions to strengthen cybersecurity resilience and reduce exposure to these threats.

Cybersecurity & Infrastructure Security Agency

Download the PDF version of the full report.

Top Recommended Actions

OT owners and operators and critical infrastructure entities should take the following steps to reduce the risk of attacks through VNC connections:

1.  Reduce exposure of OT assets to the public-facing internet. 

2.  Adopt mature asset management processes, including mapping data flows and access points. 

Ensure that OT assets are using robust authentication procedures

Source: SC Waters

---

JD Solomon Inc. provides solutions for program development, asset management, and facilitation at the nexus of facilities, infrastructure, and the environment.