CISA Alert AA26-097A: Iranian-Affiliated Actors Target PLCs Across US Critical Infrastructure: Analysis, Simulation, and Mitigation

Introduction to Malware Binary Triage (IMBT) Course

Looking to level up your skills? Get 10% off using coupon code: MWNEWS10 for any flavor.

Enroll Now and Save 10%: Coupon Code MWNEWS10

Note: Affiliate link – your enrollment helps support this platform at no extra cost to you.

CISA ALERT AA26-097A

On April 7, 2026, the FBI, CISA, NSA, EPA, Department of Energy, and US Cyber Command jointly warned [1] that Iranian-affiliated APT actors are actively exploiting internet-facing programmable logic controllers (PLCs), primarily Rockwell Automation/Allen-Bradley devices, across U.S. Government Services, Water and Wastewater Systems (WWS), and Energy sectors. The campaign has caused operational disruptions by tampering with PLC project files, manipulating HMI and SCADA displays, and in some cases producing financial losses for victim organizations.

Article Link: CISA Alert AA26-097A: Iranian-Affiliated Actors Target PLCs Across US Critical Infrastructure: Analysis, Simulation, and Mitigation