# Iran-Linked Hackers Target US Industrial Systems Cyberattacks on water and energy facilities are expanding in scope. - **Source:** [www.theregister.com - Articles (theregister.co.uk)](https://brifing.si/source/e6d4ec13-4d0e-407a-b96d-39609d76c3b1) - **Published:** 2026-07-23 - **Topic:** [Business](https://brifing.si/c/business) - **Original article:** - **On Brifing:** https://brifing.si/s/c4e3b49b-4efe-4bed-946d-045ac06114ef ## Expanding Scope of Attacks The US Cybersecurity and Infrastructure Security Agency (CISA) updated its alert on Iran-linked hackers targeting water and energy facilities. The attacks now target PLC devices from Schneider Electric and Siemens, in addition to Rockwell Automation/Allen-Bradley. ## Why PLC Devices Matter PLCs (Programmable Logic Controllers) are used to control and monitor industrial processes. Compromising these devices can lead to severe disruptions and security vulnerabilities in critical infrastructure. ## Modus Operandi of the Attacks Hackers target internet-facing PLC devices through open ports. They use Dropbear SSH software to gain remote access and modify or delete device project files. ## Dangerous Modifications Attackers disable critical shutdown and alarm logic on PLC devices. This allows systems to enter unsafe conditions without notifying operators. ## Recommendations and Mitigations CISA recommends disconnecting PLC devices from the internet, implementing isolated architectures, and controlling network access. It also advises checking project files for unauthorized changes and changing default passwords. ## Protecting Critical Infrastructure These attacks underscore the importance of cybersecurity for critical infrastructure. Organizations need to take proactive measures against such threats. ## Sources covering this story - https://www.theregister.com/security/2026/07/23/iran-linked-crews-are-probing-more-flavors-of-us-industrial-kit/5277003 — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._