Executive summary Note: This advisory relates to an active threat to Siemens S7 Series programmable logic controllers (PLCs). However, ongoing PLC targeting activity is broader than Siemens PLCs. All PLC owners and operators should apply relevant mitigations to reduce the risk to their devices and systems. The Siemens-specific content in this advisory should be understood and applied as one subset of the wider threat landscape. Top Mitigations - Inventory all Siemens S7 Series programmable logic controllers (PLCs) - Apply critical security patches - Ensure PLCs are not accessible from the Internet - Strengthen access controls - Monitor for unauthorized activity - Harden PLC services, protocols, and ladder logic…
Federal investigators are sounding the alarm after a wave of cyberattacks that hit water and wastewater systems in at least seven states, with some operations knocked offline or forced into manual mode. The FBI and Environmental Protection Agency issued a joint public service announcement on July 30 confirming that utility companies have been reporting incidents […] The post FBI and EPA Warn of Cyberattacks Disrupting Water Systems in Seven States appeared first on StoneZone .
Federal investigators are sounding the alarm after a wave of cyberattacks that hit water and wastewater systems in at least seven states, with some operations knocked offline or forced into manual mode. The FBI and Environmental Protection Agency issued a joint public service announcement on July 30 confirming that utility companies have been reporting incidents since July 27. In several cases the attacks degraded actual water operations: loss of pressure, flooding, and disruptions that in some instances prompted boil-water notices. According to assessments shared with U.S. and state officials, Iranian-affiliated actors are the leading working theory behind the activity. Investigators treat that assessment as fluid and remain alert…Open
Malicious cyber activity forced water utilities in at least seven states to switch to manual operations this week, and federal investigators are now examining whether Iran is behind the breach, even as President Trump publicly disputes that theory. The FBI, the Cybersecurity and Infrastructure Security Agency, and the Environmental Protection Agency issued a joint warning […] The post Cyberattack hits water systems in at least seven states as feds probe possible Iran connection appeared first on American Almanac .
Malicious cyber activity forced water utilities in at least seven states to switch to manual operations this week, and federal investigators are now examining whether Iran is behind the breach, even as President Trump publicly disputes that theory. The FBI, the Cybersecurity and Infrastructure Security Agency, and the Environmental Protection Agency issued a joint warning Thursday that hackers are targeting internet-exposed industrial controllers used by water and wastewater systems across the country. More than 30 community water systems in Minnesota alone lost remote monitoring and control capability after attackers compromised programmable logic controllers, the small computers that automate pumps, valves, and chemical treatment at…Open
Advisory at a Glance Title Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers Across US Critical Infrastructure Original Publication April 7, 2026 Executive Summary Iran-affiliated advanced persistent threat (APT) actors are conducting exploitation activity targeting internet-facing operational technology (OT) devices, including programmable logic controllers (PLCs) manufactured by Rockwell Automation/Allen-Bradley. This activity has led to PLC disruptions across several U.S. critical infrastructure sectors through malicious interactions with the project file and manipulation of data on human machine interface (HMI) and supervisory control and data acquisition (SCADA) displays, resulting in operational disruption and…