Iran-Linked Hackers Target US Critical Infrastructure via Exposed PLCs

Iran-linked threat actors are actively targeting internet-exposed Rockwell Automation/Allen-Bradley PLCs—over 5,200 devices (approx. 3,900 in the US) are exposed—with attacks using legitimate engineering software to manipulate PLC and SCADA data; federal agencies (CISA, FBI) have issued advisories warning of potential operational disruptions across energy, water, and government sectors.