Nearly 4,000 US industrial devices exposed to Iranian cyberattacks
ID: f018b249-4ae8-516d-ab39-930a2ffec36c
STIX ID: report--f018b249-4ae8-516d-ab39-930a2ffec36c
Feed Name: Bleeping Computer
Threat Score
Iranian-linked APT actors have been targeting internet-exposed Rockwell Automation/Allen-Bradley PLCs since March 2026, causing operational disruptions, exfiltrating device project files, and manipulating HMI/SCADA displays; Censys identifies 5,219 exposed hosts globally (approx. 74.6% in the U.S.), prompting government agencies to advise isolating PLCs, enforcing MFA, updating devices, and monitoring OT ports.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.