Iran attempting cyber attacks against U.S. critical infrastructure, officials say

LA Times ^ | 04/07/2026 | Michael Wilner

[Responsibility2nd]

• Tehran’s targeting campaigns against U.S. organizations ‘have recently escalated,’ a federal advisory warns.
• Iran has demonstrated an ability to penetrate networks tied to critical U.S. infrastructure before.

WASHINGTON — U.S. intelligence agencies are “urgently warning” private sector companies throughout the nation that Iranian actors “are conducting exploitation activity” that has resulted in “disruptions across several U.S. critical infrastructure,” according to a government notice reviewed by The Times.

The Iranian cyberactivity comes as President Trump is threatening to target Iran’s critical infrastructure in the coming hours, particularly its bridges and power plants.

Iran’s attack targeted products by Rockwell Automation’s Allen-Bradley, one of the most widely used industrial automation brands, according to the notice, which said that cyber actors affiliated with Iran were exploiting “programmable logic controllers across U.S. critical infrastructure.”

---

TOPICS: Extended News; Foreign Affairs; Hamas; Hezbollah; Iran; War on Terror; Yemen
KEYWORDS: allenbradley; cisa; cybersecurity; hamas; hezbollah; infrastructure; iran; irgc; officialssay; rockwellautomations; waronterror; yemen

[Responsibility2nd]

The advisory was issued Tuesday jointly by the FBI, the Cybersecurity and Infrastructure Security Agency, the National Security Agency, the Environmental Protection Agency, the Department of Energy, and Cyber Command.

[Responsibility2nd]

Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers Across US Critical Infrastructure

Release Date

April 07, 2026

Alert Code

AA26-097A

 

Iran-affiliated advanced persistent threat (APT) actors are conducting exploitation activity targeting internet-facing operational technology (OT) devices, including programmable logic controllers (PLCs) manufactured by Rockwell Automation/Allen-Bradley. This activity has led to PLC disruptions across several U.S. critical infrastructure sectors through malicious interactions with the project file and manipulation of data on human machine interface (HMI) and supervisory control and data acquisition (SCADA) displays, resulting in operational disruption and financial loss. 

U.S. organizations should urgently review the tactics, techniques, and procedures (TTPs) and indicators of compromise (IOCs) in this advisory for indications of current or historical activity on their networks, and apply the recommendations listed in the Mitigations section of this advisory to reduce the risk of compromise.

 

more....

 

[bigbob]

Trying a little Stuxnet of their own eh?

Wait til the find out what Trum is REALLY planning!

[Responsibility2nd]

Is this warning just a false flag by the US giving us justification to strike their infrastructure first?

We’re going to blow up their power and water sources anyway...

So we did it to them before they could do it to us.

[Frank Drebin]

Why would the United States need an excuse? We’ve been at war with them for 47 years. I believe their declaration of war and subsequent multiple attacks on US assets and personnel are more than enough justification.

[Diana in Wisconsin]

Using what? Two soup cans and a piece of string? LOL!

[dljordan]

Can they hit ActBlue?

[JPG]

Great move! Tick-off Trump even more.

[Bob Wills is still the king]

Of course they are. Independent actors will begin making attacks with body bombs, etc. in both Israel and the United States. The Iranian people may hate the Mullahs, but they hate the USA more, particularly since they see the US as little more than muscle for Israel.

[piasa]

Iran’s intelligence service conducted months- long surveillance of an American woman in New York who worked for Voice of America, for the purposes of abducting her, packing her off to Venezuela, and then hailing her to Iraq for execution. Doing that to a US citizen is excuse enough all by itself.

[goodnesswins]

Haha

[virgil]

Can they hit ActBlue?

I wouldn't be surprised if Iran is a huge donor.

[Georgia Girl 2]

So much for the surrender agreement. 🙄

[libertylover]

I’d bet real money that the LA Times won’t label these attacks on U.S. infrastructure as war crimes.

[central_va]

Break into billing and zero out our balances.

[central_va]

From now on all of our messages to Iran will be strapped to 500# GP bombs and delivered by B-52.

[mikey_hates_everything]

We need to keep an eye out for Chinese and North Korean fingerprints on these attacks and deal with those clowns accordingly.

[frank ballenger]

So the Dems and tv leftists will call this a war crime, right? /S