The Cybersecurity and Infrastructure Security Agency (CISA), in partnership with the Federal Bureau of Investigation (FBI), National Security Agency (NSA), Environmental Protection Agency (EPA), Department of Energy (DOE), United States Cyber Command – Cyber National Mission Force (CNMF), and Department of the Treasury (Treasury) has released an updated joint Cybersecurity Advisory entitled Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers Across US Critical Infrastructure .
This update re-emphasizes the ongoing threat from Iranian-affiliated advanced persistent threat (APT) actors targeting internet-connected operational technology (OT) devices, including programmable logic controllers (PLCs) manufactured by Rockwell Automation/Allen-Bradley, Schneider Electric, Siemens, and potentially other brands/manufacturers.
These attacks have resulted in operational disruptions and financial losses across multiple U.S. critical infrastructure sectors, including Government Services and Facilities, Water and Wastewater Systems, and Energy. Updates to advisory cover:
More information is available by reading the updated advisory and reviewing CISA’s Iran Threat Overview and Advisories .
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
