Iran Conflict Spurs CISA Warning For US Critical Infrastructure

The Cybersecurity and Infrastructure Security Agency (CISA), together with other federal partners, issued a joint advisory on April 7, 2026 warning of ongoing Iranian‑affiliated cyber activity targeting U.S. critical infrastructure, including the energy, water, healthcare and manufacturing sectors. The advisory focuses on vulnerabilities associated with internet-facing operational technology (OT) devices, including programmable logic controllers (PLCs) manufactured by Rockwell Automation/Allen-Bradley, and alerts organizations to potential risks associated with operating these devices. The advisory warns specifically of insecure remote access pathways, credential compromise and limited visibility into legacy or hybrid environments. It directs critical infrastructure operators to mitigate these risks by limiting access to PLCs from the internet, reviewing available logs for suspicious traffic based on the indicators of compromise provided in the advisory and hardening the affected PLCs.