Iran attempting cyber attacks against U.S. critical infrastructure, officials say

"U.S. intelligence agencies are "urgently warning" private sector companies that Iranian actors "are conducting exploitation activity" resulting in disruptions across several U.S. critical infrastructure."

"Iran-affiliated advanced persistent threat (APT) actors are conducting exploitation activity targeting internet-facing operational technology (OT) devices, including programmable logic controllers (PLCs) manufactured by Rockwell Automation/Allen-Bradley."

"The advisory was issued Tuesday jointly by the FBI, the Cybersecurity and Infrastructure Security Agency, the National Security Agency, the Environmental Protection Agency, the Department of Energy, and Cyber Command."

"U.S. organizations should urgently review the tactics, techniques, and procedures (TTPs) and indicators of compromise (IOCs) in this advisory for indications of current or historical activity on their networks."

U.S. intelligence agencies have issued urgent warnings about Iranian cyber actors conducting exploitation activities that disrupt critical infrastructure. The attacks focus on Rockwell Automation's Allen-Bradley products, specifically targeting programmable logic controllers. These actions have escalated amid rising tensions between Iran and the U.S. and Israel. Organizations are advised to review their security measures and indicators of compromise. The advisory was released by multiple federal agencies, emphasizing the need for heightened vigilance among key infrastructure companies.

Read at Los Angeles Times