Cybersecurity Policy Report, Iranian Hackers Disrupt Energy, Water Sectors, U.S. Agencies Warn, (Apr 7, 2026)
Organizations Mentioned:Rockwell Automation | U.S. Cyber Command
Iranian hackers are targeting industrial control systems in the energy and water/wastewater sectors, causing disruption and financial loss to the victims, U.S. cyber defense agencies warned today.
“Iran-affiliated advanced persistent threat (APT) actors are conducting exploitation activity targeting internet-facing operational technology (OT) devices, including programmable logic controllers (PLCs) manufactured by Rockwell Automation/Allen-Bradley,” the agencies said in an advisory.
“This activity has led to PLC disruptions across several U.S. critical infrastructure sectors through malicious interactions with the project file and manipulation of data on human machine interface (HMI) and supervisory control and data acquisition (SCADA) displays, resulting in operational disruption and financial loss,” they said.
“U.S. organizations should urgently review the tactics, techniques, and procedures (TTPs) and indicators of compromise (IOCs) in this advisory for indications of current or historical activity on their networks,” they added.
“Iranian-affiliated APT targeting campaigns against U.S. organizations have recently escalated, likely in response to hostilities between Iran, and the United States and Israel,” the agencies noted.
They recommended, among other things, that critical infrastructure operators remove their PLCs “from direct internet exposure via secure gateway and firewall” and check logs “for suspicious traffic on the ports associated with OT devices.”
The advisory was issued by the Federal Bureau of Investigation, Cybersecurity and Infrastructure Security Agency, National Security Agency, Environmental Protection Agency, Department of Energy, and U.S. Cyber Command.
MainStory: TopStory FederalLegislation DataSecurity