Iranian hackers break into U.S. industrial systems, agencies warn

Key Points:

• Multiple U.S. federal agencies have issued a warning that Iran-affiliated hackers are actively compromising industrial control systems, particularly targeting Rockwell Automation's internet-facing tools, causing disruptions in critical infrastructure sectors.
• The cyberattacks have affected government services, water and wastewater services, and the energy sector, resulting in operational disruptions and financial losses, though the severity of these impacts remains unclear.
• The advisory, jointly released by CISA, FBI, NSA, the Energy Department, and U.S. Cyber Command, identifies the attackers as advanced persistent threat (APT) actors linked to Iran and recommends taking vulnerable controllers offline.
• These developments coincide with heightened U.S.-Iran tensions, including President Trump's stern warning regarding the Strait of Hormuz and Pentagon plans outlining potential infrastructure targets in Iran.
• Since the conflict began in February, Iran has publicly claimed only one major cyberattack on a U.S. company, targeting Michigan-based medical tech firm Stryker.