Iranian Cyber Attacks Target U.S. Critical Infrastructure Amid Ongoing Conflict

• •Iranian cyber operations have targeted U.S. critical infrastructure since February 2026.
• •CISA has reduced cybersecurity assessments amid budget cuts, increasing vulnerabilities.
• •90% of state CISOs report cyber incidents as a major concern for critical infrastructure.

Since the onset of the U.S. war with Iran on February 28, 2026, Iranian cyber operations have intensified, focusing on U.S. critical infrastructure. Reports indicate that Iranian-linked attackers targeted water treatment facilities in the Midwest. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has scaled back cybersecurity assessments for critical infrastructure due to budget cuts, raising concerns about vulnerabilities. A National Association of State Chief Information Officers report highlighted that 90% of state Chief Information Security Officers (CISOs) view cyber incidents as a major issue. Additionally, a Honeywell Technologies report found that only 20% of organizations have complete visibility into their operational technology assets. The situation is compounded by the fact that 50-85% of critical infrastructure is managed by private entities, making public-private partnerships essential yet often ineffective. Experts warn that the slow pace of remediation in operational technology systems poses significant challenges against modern cyber threats.