Iranian Hackers Target Siemens and Schneider PLCs, Causing Operational Disruptions

CISA and the FBI warn that Iran-affiliated hackers, including the CyberAv3ngers, have expanded campaigns against U.S. critical infrastructure by targeting Siemens, Schneider Electric, and Rockwell Automation PLCs; attackers used legitimate software to falsify sensor data, exploited known vulnerabilities (notably CVE-2021-22681), and caused operational disruptions and financial losses across sectors such as water treatment and energy, with recommendations to strengthen access controls and validate project files.