Apr 07, 2026 • Sergiu Gatlan
US warns of Iranian hackers targeting critical infrastructure
U.S. authorities have issued warnings about Iranian-linked threat actors actively targeting Internet-exposed Rockwell/Allen-Bradley programmable logic...
Executive Summary
U.S. authorities have issued warnings about Iranian-linked threat actors actively targeting Internet-exposed Rockwell/Allen-Bradley programmable logic controllers (PLCs) across critical infrastructure sectors. These attacks focus on industrial control systems that are directly accessible from the internet, creating significant risk of operational disruption to power grids, water systems, manufacturing, and other essential services. The threat actors aim to compromise, manipulate, or disrupt PLCs that control physical processes, potentially leading to service outages or safety incidents. Organizations operating OT/ICS environments must immediately audit internet-facing PLCs, implement network segmentation, restrict external access, and deploy monitoring solutions to detect unauthorized PLC modifications or anomalous activity.
Summary
Iranian-linked hackers are targeting Internet-exposed Rockwell/Allen-Bradley programmable logic controllers (PLCs) on the networks of U.S. critical infrastructure organizations. [...]
Published Analysis
U.S. authorities have issued warnings about Iranian-linked threat actors actively targeting Internet-exposed Rockwell/Allen-Bradley programmable logic controllers (PLCs) across critical infrastructure sectors. These attacks focus on industrial control systems that are directly accessible from the internet, creating significant risk of operational disruption to power grids, water systems, manufacturing, and other essential services. The threat actors aim to compromise, manipulate, or disrupt PLCs that control physical processes, potentially leading to service outages or safety incidents. Organizations operating OT/ICS environments must immediately audit internet-facing PLCs, implement network segmentation, restrict external access, and deploy monitoring solutions to detect unauthorized PLC modifications or anomalous activity. Iranian-linked hackers are targeting Internet-exposed Rockwell/Allen-Bradley programmable logic controllers (PLCs) on the networks of U.S. critical infrastructure organizations. [...] Iranian-linked hackers are targeting Internet-exposed Rockwell/Allen-Bradley programmable logic controllers (PLCs) on the networks of U.S. critical infrastructure organizations. [...]
Linked Entities
- Iranian-linked hackers