U.S. warns of Iranian cyber threats on critical infrastructure

U.S. cyber agencies (CISA, FBI, NSA, DoD) issued a joint advisory warning that Iranian-affiliated threat actors may target U.S. critical infrastructure — especially Defense Industrial Base companies tied to Israeli defense, and sectors such as energy, water, and healthcare. The advisory cites prior activity including a 2023 PLC breach of a Pennsylvania water facility, DDoS/defacements, ransomware operations and data-wiping, highlights common TTPs (unpatched vulnerabilities, default credentials), and urges implementation of mitigations like network isolation, MFA, patching, monitoring, and tested incident response.