So, water and power infrastructure use shitty old industrial control systems, are most if not all are on the Internet, run at a financial deficit, and are generally not well maintained. They don’t have the time, funding, manpower or knowledge to decrease their attack surface nor to operate manually rather than via the junk ICS they’re using.

They (volt typhoon) practiced in mennasotas infrastructure and iirc sat in there 300 days and they had full control. They’re using several novel attack vectors, have as of August, built a presence in police, fire, hospital, electric, power, and gas infrastructure.

https://www.bleepingcomputer.com/news/security/fbi-badbox-20-android-malware-infects-millions-of-consumer-devices/

https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-038a

https://cybersecuritynews.com/amazon-catches-north-korean-it-worker/

https://www.cisa.gov/news-events/cybersecurity-advisories/aa25-343a

The gun is loaded. They’re still working for more complete control. The timeline is 2027ish, or whenever China attacks Taiwan and the US steps up.

The attack is expected to be everywhere at once, that way neighboring towns won’t be able to give aid because emergency services will be overwhelmed. Mutual aid agreements will fall apart.

Did you know that hospitals stop functioning entirely when water is cut for 8h? A hospital COULD function with water trucks, but not in the case of concurrent attacks.

CISA lost 1000 of it 3300 staff, and they were overtaxed before.

It’s bad. Get a lifestraw or Sawyer mini.

I’ve not even touched on salt typhoons pwnage of telecom and network infrastructure.

Get a Meshtastic radio and a couple handhelds. Baofeng makes very approachable stuff.

The US military is self sufficient, but neither they nor the nat’l guard are equipped to help with this kind of attack.

I can’t really share much more right now but there are plenty of reputable sources available online for all this. Just don’t start googling before bed. Do yourself a favor.