US EditionThousands of U.S. Industrial Controllers Exposed to Iranian Hackers, Censys Finds
The advisory says the hackers are exploiting internet-exposed controllers to alter industrial data and cause disruptions, with more than 5,200 devices found online.
- On Wednesday, federal agencies warned that Iran-linked actors are exploiting internet-exposed Rockwell Automation/Allen-Bradley programmable logic controllers across U.S. critical infrastructure, causing operational disruptions and financial losses since March.
- Escalating since March 2026 following U.S.-Israel hostilities, these intrusions mirror earlier campaigns by CyberAv3ngers, an Iran-linked group that targeted similar operational technology devices at water and wastewater utilities in late 2023.
- Researchers at Censys identified more than 5,200 internet-exposed Rockwell devices globally, with nearly 3,900 based in the United States; attackers are manipulating HMI displays and extracting project files from compromised controllers.
- Authorities urge critical infrastructure operators to immediately disconnect controllers from the public internet, enable multifactor authentication, and review logs for suspicious traffic originating from overseas hosting providers.
- The North American Electric Reliability Corp. sent an "all-points bulletin" urging industry vigilance, with its Watch Operations team actively monitoring the grid as experts characterize these operations as a persistent asymmetric strategy by Iran-affiliated actors.
83 Articles
83 Articles
Iran-linked hackers are now targeting industrial controllers in US infrastructure
Federal agencies, including the FBI, CISA, NSA, the Department of Energy, US Cyber Command, and the Environmental Protection Agency, issued an urgent joint advisory Tuesday, warning that an advanced persistent threat group linked to Iran has been exploiting vulnerabilities in programmable logic controllers since at least March 2026.Read Entire Article
Iran-linked hackers targeting critical US energy and water infrastructure
Hackers linked to the Iranian government have been targeting critical U.S. infrastructure, resulting in operational disruption and financial loss, according to a joint U.S. government advisory. The hacking campaign started last month after the U.S. and Israel began carrying out air strikes against Iran. The advisory — issued by agencies including the Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FB…
Hackers associated with the Iranian government have targeted energy and water infrastructure in the United States after President Donald Trump launched the war against the country in the Middle East, showing a new warning issued by the Agency for Safety and Security of Infrastructure (CISA) and other agencies of the US government, reports Gizmodo. According to CISA, hackers have seen ...
Coverage Details
Bias Distribution
- 65% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
