Iran-linked crews are probing more flavors of US industrial kit

CISA expanded its alert on Iranian-affiliated hackers targeting US critical infrastructure. The original advisory focused on Rockwell Automation PLCs. The update warns attackers may also target devices from Schneider Electric and Siemens. Attackers exploit internet-facing PLCs, extract project files, and disable shutdown logic to cause unsafe conditions.