A recent report from Poland's security agency reveals that five water treatment plants have suffered industrial control system (ICS) breaches, granting hackers the capability to alter equipment parameters. This level of access poses a significant threat to the public water supply, as malicious modifications could compromise water quality. The breaches highlight the vulnerability of critical infrastructure to cyber attacks, which can have severe consequences for public health and safety. The agency's report underscores the need for enhanced security measures to protect ICS systems from such threats1. The fact that hackers were able to gain such extensive control over the water treatment plants' systems is particularly alarming, as it suggests a high degree of sophistication and intent. So what matters most to practitioners is that these breaches demonstrate the urgent need to bolster ICS security to prevent similar incidents that could have devastating consequences for public health.