🛡️ **BREAKING: Iranian State Actors Exploiting Internet-Exposed PLCs in US Critical Infrastructure**
Published Monday, August 24, 2026 at 11:01 AM PT BLUF: Iranian-linked threat actors are actively compromising programmable logic controllers (PLCs) across US water and energy infrastructure. FBI confirms targeting of Rockwell Automation and Allen-Bradley devices. Critical infrastructure operators must immediately audit and isolate internet-exposed OT devices. This is an ongoing campaign. DETAILS: FBI issued formal warning against Iranian cyberattacks targeting operational technology (OT) devices, specifically PLCs manufactured by Rockwell Automation and Allen-Bradley platforms Threat actors are exploiting internet-exposed PLCs in US water supply systems (documented incidents in New Jersey, Alabama, and Minnesota) and energy control systems Iran-linked actor CyberAv3ngers linked to Minnesota water system compromise; broader campaign uses modular C&C framework for device control Attack vector: direct internet exposure of PLCs without network segmentation or authentication hardening Intrusions enable remote manipulation of industrial control systems with potential to disrupt service delivery or cause physical damage IMPACT: ...