Six Agencies Warn of Iranian Hackers Targeting US Industrial Controls

CISA, FBI, NSA, EPA, DOE, and US Cyber Command issued a joint advisory warning that Iran-affiliated APT actors are actively exploiting Rockwell Automation/Allen-Bradley programmable logic controllers across U.S. critical infrastructure. The advisory documents malicious activity targeting internet-facing PLCs in energy, water, and manufacturing sectors.

Operators of industrial control systems should immediately audit their PLC deployments, remove internet-facing devices where possible, and implement network segmentation controls outlined in the joint advisory.

Facilities running Rockwell PLCs in operational technology environments must treat this as an urgent priority—nation-state actors targeting industrial control systems can cause physical damage beyond data theft.