This is the August 17, 2026 roundup.
Coordinated cyber incidents degrade operations at multiple U.S. water utilities
State and federal reports describe a coordinated campaign targeting U.S. water utilities that Minnesota says affected more than 30 systems, while the FBI reported water-utility cyber incidents in at least seven states. Some activity was reported to temporarily degrade operational functions; sources do not report disruptions to drinking-water supplies. Remote-management equipment and internet-connected operational systems were identified as central exposure points. CISA guidance cited in reports includes reducing internet exposure for control systems and resetting credentials. No U.S. agency has publicly attributed the campaign to Iran; attribution remains suspected and unconfirmed.
Report: proposed Water Cyber Shield Act would authorize EPA cybersecurity assessments
Industrial Cyber reported that Senators Schiff and Klobuchar introduced the proposed Water Cyber Shield Act, which the report says would authorize EPA cybersecurity assessments of water systems and require corrective actions for significant vulnerabilities. Browser access to the original story was blocked by an anti-bot check, so details are limited to the source’s indexed description; this summary attributes the claims as reported by that source. The draft proposal, as reported, focuses on assessment authority and mandated remediation rather than prescribing technical controls.
Nozomi Networks and Sophos integrate OT telemetry with Sophos Fusion
Nozomi Networks and Sophos announced an integration that brings Nozomi Vantage operational-technology telemetry, asset intelligence and threat data into Sophos Fusion, enabling cross-domain correlation across OT, endpoints, networks, cloud and identity data. The integration is reported to support automated enrichment of OT telemetry and to feed SOAR-style response workflows, improving situational awareness and enabling coordinated detection and response across IT and OT domains. Practitioners should evaluate integration benefits against deployment complexity and data-sharing requirements in mixed IT/OT environments.
