Cybersecurity — 2026-04-08
CISA Warns Iran-Linked Actors Targeting US Critical Infrastructure PLCs Amid Conflict
CISA issued a joint advisory with the FBI, NSA, EPA, DOE, and US Cyber Command warning that Iran-linked actors are exploiting internet-facing
Analysis
This advisory escalates from general warnings to specific attack vectors, naming Rockwell Automation/Allen-Bradley CompactLogix and Micro850 controllers, with confirmed operational disruption at US facilities. The joint issuance by six agencies plus Cyber Command indicates assessed high confidence in the attribution and immediacy of the threat. Energy and water utilities are the primary targets, consistent with Iranian retaliatory cyber doctrine during active conflict.
This advisory escalates from general warnings to specific attack vectors, naming Rockwell Automation/Allen-Bradley CompactLogix and Micro850 controllers, with confirmed operational disruption at US facilities. The joint issuance by six agencies plus Cyber Command indicates assessed high confidence in the attribution and immediacy of the threat. Energy and water utilities are the primary targets, consistent with Iranian retaliatory cyber doctrine during active conflict.