Over 4,400 Rockwell PLCs Exposed Online, 22 Found in Water Attack Cities

Forescout found 22 internet-facing Rockwell Automation programmable logic controllers (PLCs) in cities hit by recent cyberattacks on US water utilities. Nineteen used the same mobile carrier network. Its August 3 scan counted 4,407 exposed Rockwell controllers worldwide, including 2,844 in the United States, but Forescout could not confirm any were compromised. That figure counts exposed

The article reports that Forescout identified 4,407 Rockwell PLCs exposed online worldwide, including 2,844 in the United States, and 22 in cities affected by recent water-utility cyberattacks; Forescout did not confirm compromise of those devices. It also notes that many of the exposed controllers were reachable over mobile carrier networks and that some were running firmware associated with a known Rockwell vulnerability. RealGround analysis: this is primarily an operational exposure and governance issue because publicly reachable industrial controllers increase attack surface and can complicate asset oversight, segmentation, and incident response.