Iran attempting cyberattacks against U.S. critical infrastructure, officials say

Key Points:

• U.S. intelligence agencies have issued urgent warnings to private sector companies about Iranian cyber exploitation targeting critical infrastructure, particularly programmable logic controllers by Rockwell Automation’s Allen-Bradley.
• The increased Iranian cyber activity is likely a response to escalating hostilities with the U.S. and Israel, amid President Trump's threats to target Iran’s critical infrastructure, including bridges and power plants.
• U.S. energy and telecommunications sectors have improved defenses since past breaches, but concerns remain about latent malware and potential physical attacks by Iran or proxies, with broader risks from other state actors like Russia and China.
• Private companies, which own about 85% of U.S. critical infrastructure, are the first line of defense and are working closely with government agencies such as CISA and the FBI to detect and respond to threats.
• Recent cyber incidents, including a hack on the Los Angeles Metro system possibly linked to Iran-backed actors, underscore the ongoing and immediate nature of cyber threats to U.S. infrastructure.