loganwest123
Member
- Location
- Central NC
- Occupation
- Electrical Engineering
Good morning; if you not yet aware, please take preventative steps in the coming days, or communicate this with appropriate individuals within your respective domains:
CISA and FBI warn that Iranian-affiliated cyber actors are actively targeting and exploiting internet-exposed Programmable Logic Controllers (PLCs), specifically targeting Rockwell Automation/Allen-Bradley units in US critical infrastructure, such as water, energy, and government facilities. These attacks (since March 2026) cause operational disruptions and data manipulation.
Key Recommendations from Advisory AA26-097A:
CISA and FBI warn that Iranian-affiliated cyber actors are actively targeting and exploiting internet-exposed Programmable Logic Controllers (PLCs), specifically targeting Rockwell Automation/Allen-Bradley units in US critical infrastructure, such as water, energy, and government facilities. These attacks (since March 2026) cause operational disruptions and data manipulation.
Key Recommendations from Advisory AA26-097A:
- Remove Public Exposure: Immediately take internet-facing PLCs offline.
- Secure Access: Utilize secure gateways (jump hosts) for remote access and implement strong authentication, especially on cellular modems.
- Physical Protection: Set physical PLC mode switches to "Run" mode to prevent remote modification.
- Review Activity: Check networks for malicious interaction with project files and unauthorized access (Tactics, Techniques, and Procedures - TTPs).
