Rockwell Advises Disconnecting Internet-Facing ICS Devices Amid Cyber Threats

Rockwell Automation (with CISA amplification) urges customers to immediately disconnect ICS/OT devices that should not be internet-accessible and to apply mitigations after researchers demonstrated a novel web-based PLC malware technique that can exploit embedded web servers and APIs to perform Stuxnet-style sabotage; the advisory describes the attack vector, potential impacts (manipulating sensors/actuators, disabling alarms), and recommended mitigations such as removing public exposure, patching, auditing remote access, and restricting control tools.