FBI, Pentagon warn of Iran hacking groups targeting operational technology

U.S. federal agencies warn that Iranian-affiliated APT actors have been actively targeting internet-exposed OT devices (notably Rockwell/Allen-Bradley PLCs and potentially Siemens gear), disrupting water, energy and municipal services since at least March 2026; the advisory highlights active exploitation (including CVE-2021-22681), draws links to prior 2023 campaigns, and urges removal of OT devices from direct internet exposure and forensic log review.