logo

Pro-Iran hackers are targeting US industrial control systems, advisory says

ID: 89d9d6c9-18ec-53f1-82bf-d401b0f5789d

STIX ID: report--89d9d6c9-18ec-53f1-82bf-d401b0f5789d

Feed Name: Nextgov Cybersecurity

Threat Score
85/100

Date Published: 2026-04-07

Date Updated: 2026-04-22

Author: David DiMolfetta

...
...

Iran-aligned APT actors have been observed exploiting and disrupting Rockwell Automation Allen-Bradley programmable logic controllers (PLCs) in multiple U.S. critical infrastructure sectors, including water, energy, and government services. The campaign involved manipulation of human-machine interfaces (HMIs), SCADA displays, and project files, causing operational disruption and financial loss; the advisory was issued jointly by CISA, FBI, NSA, EPA, DOE and U.S. Cyber Command and recommends isolating PLCs from the internet, reviewing logs, and hardening Rockwell devices.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.