“Forescout found 22 internet-facing Rockwell Automation programmable logic controllers (PLCs) in cities hit by recent cyberattacks on US water utilities.”
A single August scan turned up 4,407 exposed Rockwell controllers worldwide, 2,844 of them in the United States. Water and wastewater utilities in at least seven states have reported incidents since July 27. These are the boxes that open valves and run pumps, sitting on the public internet because somebody wanted remote access and nobody wanted to pay for a VPN. Anyone with a search engine can find them. The only real question is who already did.