Thank you. This article is much more clear overall. So much so that I'd suggest it replace the URL on this submission. Although even this article dances around

Thank you. This article is much more clear overall. So much so that I'd suggest it replace the URL on this submission. Although even this article dances around things awkwardly as well: > The machine that was hacked uses a system called Unitronics, which has Israeli-owned components Unitronics is headquartered in Israel. Anything with its branding is de-facto Israeli-owned. "containing some Israeli-owned components" is a very strange and complex way of communicating that, and much harder to write than the default: > The machine that was hacked was a system made by Unitronics, an Israeli company. Back to the meat of the article: > The PLCs are generally supposed to be cut off from the public internet to prevent hackers from getting in. But Ron Fabela, an industrial cybersecurity expert, told CNN on Tuesday that he has found numerous cases — at critical infrastructure facilities in multiple states — of the exact same make and model of equipment that was compromised at the Aliquippa water authority that were sitting on the public internet. That can make gaining access to sensitive industrial facilities relatively easy for hackers. This is exactly it. The 40,000 water treatment districts around the USA can't do this themselves, not reliably. Ideally we'd have a defensive arm of the NSA automatically scanning the internet for domestic targets like this and helping utilities make sure their control systems are not publicly-facing. I can say that there are special water treatment districts like the Eagle River Water & Sanitation District in Vail, CO which receive special attention, grants, and partnership from NSA/CISA due to their unique geography (where due to dams, cybersecurity events could affect much larger populations than usual). But I think NSA might be a bit too offensively-focused. It seems easy enough to scan domestic utilities for automation equipment that's improperly exposed to the internet. Pretty low-hanging fruit for an agency dedicated to "National Security"