Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers Across US Critical Infrastructure

**Executive Summary:** U.S. agencies urgently warn of ongoing Iranian-affiliated targeting of internet-exposed PLCs across multiple vendors (Rockwell/Allen-Bradley, Schneider Electric, Siemens and others), causing operational disruptions and financial loss via malicious project file interactions and manipulation of HMI/SCADA displays; the update adds detection guidance for malicious reusable code modules in Rockwell PLC programs and emphasizes restricting direct internet access and secure deployment practices.