Iranian Hackers Target US Critical Infrastructure via Exposed PLCs

Iranian-affiliated operators are exploiting more than 5,200 internet-exposed Rockwell Automation PLCs—concentrated in the US—to target government and critical infrastructure (energy, water), using legitimate vendor tools to manipulate control systems and causing reported operational disruptions; CISA has warned organizations to disconnect these devices from public networks to mitigate risk.