Guarding Vermont's water source from cyber attackers
In the quiet town of Cavendish, nestled alongside glitzy ski resorts and major defense contractors, a small but crucial part of New England's critical infrastructure is under threat. The town's water treatment plant, run by Chris Hughes and another operator, has become the focus of a national concern as cybersecurity experts scramble to protect America's water systems.
Project Franklin, a new volunteer effort spearheaded by heavyweights in the cybersecurity field, aims to help small towns like Cavendish improve their digital defences. One such expert is Forest Anderson, a local water operator and self-proclaimed tech nerd, who works as a cybersecurity system specialist for the nonprofit Vermont Rural Water Association.
Anderson uses a Vermont metaphor to explain the importance of improving cybersecurity. "Cavendish is currently an easy target for hackers, like a six-point buck in a field," he says. "But by moving into the woods, it will be harder for hackers to hit their mark."
Chris Hughes, the operator at the heart of the story, has had his fair share of problems in his job, including dealing with lightning strikes, missing manhole covers, and clogged sewer pipes due to flushable wipes. However, he is now learning about a new threat - hackers.
Hackers from nation-states and criminal gangs are causing chaos, making money, and preparing for potential future conflicts with the United States. In January, Russian hackers took credit for making a water system overflow in Muleshoe, Texas. Now, the U.S. Environmental Protection Agency has issued a warning about an increase in cyberattacks targeting American water systems.
One specific hacking group causing concern for Anderson is Volt Typhoon, a Chinese group that U.S. national security officials claim has been infiltrating U.S. critical infrastructure, with the potential to shut off water systems in times of conflict.
To counter this threat, Cavendish and its water treatment plant are taking steps to improve their cybersecurity. They are installing network monitoring tools, a virtual private network, and system backups. The organization that established a team in Vermont to support local water utilities in defending against digital attacks is the Vermont Information Consortium (VIC).
The article, covered by Jenna McLaughlin for NPR, highlights the efforts being made to protect small towns like Cavendish from cyber threats. As Hughes expresses his concern about being the only barrier between the Iranians and their water system, it becomes clear that the stakes are high. Tim Pappa, a former FBI agent now working in cybersecurity in the corporate world, underscores this point, stating that water systems are a "soft underbelly" that could be easily exploited by hackers.
As the world becomes increasingly digital, the need for cybersecurity in small towns like Cavendish is more important than ever. The town, once an easy target, is now taking steps to ensure its water system remains safe and secure for its residents.
