US warns of Iranian hackers targeting critical infrastructure

**Executive summary:** A joint advisory from U.S. federal agencies warns that Iranian-affiliated APT actors are actively targeting internet-exposed Rockwell/Allen-Bradley PLCs across multiple U.S. critical infrastructure sectors (including water/wastewater and energy), conducting project-file exfiltration and manipulating data shown on HMI/SCADA systems since March 2026; the advisory links this activity to prior Iranian-linked campaigns and provides mitigation steps and IoC-hunting guidance.