CISA, FBI, and EPA Update Advisory on Iranian-Affiliated Cyber Threats to US Critical Infrastructure

The Cybersecurity and Infrastructure Security Agency (CISA), FBI, and EPA have updated a joint Cybersecurity Advisory warning U.S. organizations of ongoing Iranian-affiliated cyber activity targeting internet-connected operational technology (OT) devices. The update provides new guidance to detect malicious changes in reusable code modules within Rockwell Automation PLC programs and expands the manufacturer scope to include observed targeting of Schneider Electric, Siemens, and potentially other PLCs.