Emily Austin, a senior researcher at Censys, presents findings on internet-exposed control systems used in water and wastewater infrastructure. The research team has uncovered concerning vulnerabilities, including state-sponsored actors targeting critical infrastructure PLCs. The presentation highlights security flaws in industrial control systems, such as default passwords and lack of authentication, posing a threat to water and wastewater systems. Censys distinguishes between real device exposures and honeypots to provide accurate information and plans to distribute a list of exposed devices by region.