Poland's primary intelligence agency has implicated Russia in a series of hacking incidents targeting the country's water treatment facilities and other critical infrastructure. The breaches allegedly involved sophisticated sabotage tactics, highlighting the evolving nature of cyber threats. Specifically, the attacks have raised concerns about the vulnerability of industrial control systems, which could have devastating consequences if compromised. The United States is also considered to be at risk of similar attacks, given the interconnectedness of global water treatment systems and the potential for cross-border cyber threats1. The incident underscores the need for heightened vigilance and cooperation between governments and private sector entities to mitigate the risks associated with these types of breaches. As a result, cybersecurity practitioners should be prepared for potential downstream regulatory and supply-chain effects, particularly in the context of industrial control system security. This incident matters to practitioners because it highlights the critical need to reassess and bolster the security of critical infrastructure.