Iranian attacks on US critical infrastructure puts 3,900 devices in crosshairs

Censys, referencing a federal joint alert, found ~5,219 internet-exposed Rockwell/Allen-Bradley PLCs potentially targeted by Iranian government–backed attackers (≈3,900 in the U.S.), highlighting active exploitation since March that disrupted energy, water, and government services; many devices are cellular-connected and running end-of-life software, and researchers published IoCs and threat-hunting queries.