CISA Warns Iran-Linked Actors Targeting US Critical Infrastructure PLCs Amid Conflict

CISA issued a joint advisory with the FBI, NSA, EPA, DOE, and US Cyber Command warning that Iran-linked actors are exploiting internet-facing Rockwell Automation/Allen-Bradley programmable logic controllers and other OT devices at US critical infrastructure facilities. The attackers have manipulated project files and tampered with HMI and SCADA displays, causing operational disruption and financial loss at energy and water utilities. The advisory represents the most specific warning to date about Iranian cyber operations against US industrial control systems during the ongoing conflict.