Iran-Linked Cyber Threats Target US Water and Energy Infrastructure

U.S. agencies (EPA, FBI, CISA) issued a joint advisory warning that Iran-affiliated actors are actively exploiting a critical authentication bypass in Rockwell Automation PLCs (CVE-2021-22681) to target water and energy infrastructure, causing operational disruptions and financial losses; the advisory notes hundreds of U.S. water systems with weak configurations and recommends measures such as MFA and removing devices from public internet exposure.