Suspected Iran-linked cyberattacks are highlighting significant vulnerabilities within America's fragmented drinking water systems. These systems face the dual threats of aging infrastructure and the escalating impacts of climate change. Disruptions to drinking water can jeopardize public health and essential services, particularly for smaller utilities with limited resources. Utilities are now grappling with immediate cybersecurity threats alongside persistent issues like climate change and deteriorating infrastructure. The vast network of over 144,000 public water systems, many independently managed, complicates modernization and consistent security standards. These challenges reflect decades of accumulated infrastructure and funding issues across multiple administrations. Local control over investments, heavily influenced by municipal water rates, creates barriers to necessary upgrades. While some utilities are redesigning systems for resilience against both cyberattacks and disasters, a sustained government effort to bolster defenses is lacking. Modern digital control systems were often designed for efficiency, not security, necessitating a cultural shift in threat awareness. The American Water Works Association is lobbying Congress for federal support and minimum cybersecurity requirements for water utilities. Extreme weather events are forcing utilities to prepare for previously unanticipated disasters. Utilities must now balance investments in cybersecurity with critical infrastructure replacement, all while facing increased stress from climate change. Small utilities often struggle with staffing and funding for cybersecurity, relying on external expertise for support. Ultimately, water systems must address cyberattacks, climate change, and aging infrastructure as interconnected problems.