---
title: "Joint Cybersecurity Advisory: Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers Across US Critical Infrastructure to Cause Disruption"
description: EPA warns water and wastewater utilities about cyber risks targeting internet-connected OT devices. Discover steps to secure PLCs and protect critical infrastructure.
---

<https://info.wesslerengineering.com/blog/cybersecurity-advisory#>

Share this ArticleLike this article? Email it to a friend!

Friend's Email Address

Your Name

Your Email Address

Comments

Send Email

Email sent!

![facebook](https://www.facebook.com/tr?id=314229042108894&ev=PixelInitialized)

[** Back to All Blog Posts](https://info.wesslerengineering.com/blog)

# Joint Cybersecurity Advisory: Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers Across US Critical Infrastructure to Cause Disruption

[Facebook0](https://www.facebook.com/sharer/sharer.php?u=https://info.wesslerengineering.com/blog/cybersecurity-advisory&display=popup&ref=plugin&src=share_button) [Tweet0](https://twitter.com/share?url=https://info.wesslerengineering.com/blog/cybersecurity-advisory&text=MS4%20Training%20%E2%80%93%20Pollution%20Prevention%20%26%20Good%20Housekeeping%20Part%20I) [LinkedIn0](https://www.linkedin.com/shareArticle?mini=true&url=https://info.wesslerengineering.com/blog/cybersecurity-advisory) [Email0](https://info.wesslerengineering.com/blog/cybersecurity-advisory#shared-counts-email)

 Posted By Wessler Engineering on April 08, 2026

![](https://content.govdelivery.com/attachments/fancy_images/USEPAOGWDW/2026/04/13445746/6812447/alert-banner_crop.jpg)

*The following statement was released by the [Office of Water Emergency Response & Cybersecurity](https://www.epa.gov/waterresilience?utm_medium=email&utm_source=govdelivery) at the EPA.*

**Overview**

The Federal Bureau of Investigation (FBI), Cybersecurity and Infrastructure Security Agency (CISA), National Security Agency (NSA), and Environmental Protection Agency (EPA) are urgently warning U.S. organizations of ongoing cyber exploitation of internet-connected operational technology (OT) devices, including Rockwell Automation/Allen-Bradley-manufactured programmable logic controllers (PLCs), across multiple U.S. critical infrastructure sectors.

**Recommended Actions**

EPA recommends water and wastewater systems review the tactics, techniques, and procedures (TTPs) and indicators of compromise (IOCs) in this advisory for indications of current or historical activity on their networks, and apply the recommended immediate steps to prevent the attack:

- Limit PLC exposure to the public-internet
- Ensure PLCs are in run mode to prevent remote modification
- Replace all default passwords on PLCs and OT with strong, unique passwords

Water systems are encouraged to review and implement the additional follow-up steps included in the advisory to further strengthen their cybersecurity posture.

**Technical Assistance**

If you have questions about any of the information in this alert, including assistance with the mitigation steps, submit a request to [EPA’s Cybersecurity Technical Assistance Program for the Water Sector.](https://links-2.govdelivery.com/CL0/https:%2F%2Fwww.epa.gov%2Fwaterresilience%2Fforms%2Fcybersecurity-technical-assistance-program-water-sector%3Futm_medium=email%26utm_source=govdelivery/1/0101019d68ef7610-bae4001f-836d-4e49-aa0b-8532eda5dcf5-000000/nv1uYIxG6E2md3qypkwi7Y07muzViB6L4gkxVCZhDgE=451)

**Report an Incident**

Organizations are encouraged to report information concerning suspicious or criminal activity to FBI Internet Crime Complaint Center (IC3) at [IC3.gov](https://links-2.govdelivery.com/CL0/http:%2F%2Fwww.IC3.gov%3Futm_medium=email%26utm_source=govdelivery/1/0101019d68ef7610-bae4001f-836d-4e49-aa0b-8532eda5dcf5-000000/r0VRHh5kZ-6X3kY-7pz9z4Ij6t3wV4-7YPIGNf7z2zs=451) or to CISA via [CISA’s Incident Reporting System](https://links-2.govdelivery.com/CL0/https:%2F%2Fwww.cisa.gov%2Fforms%2Freport%3Futm_medium=email%26utm_source=govdelivery/1/0101019d68ef7610-bae4001f-836d-4e49-aa0b-8532eda5dcf5-000000/3ouTNBym_STsb8OU0fwFiDgY2t6PWUFVukY4vKwiwhY=451).

For more detailed information, go to [IC3.gov](https://www.ic3.gov/CSA/2026/260407.pdf?utm_medium=email&utm_source=govdelivery).

Tags

[emergency planning](https://info.wesslerengineering.com/blog/topic/emergency-planning) [cybersecurity](https://info.wesslerengineering.com/blog/topic/cybersecurity) [cybersecurity threats](https://info.wesslerengineering.com/blog/topic/cybersecurity-threats) [emergency response](https://info.wesslerengineering.com/blog/topic/emergency-response)

### Subscribe

![](https://www.facebook.com/tr?id=1929122400700835&ev=PageView&noscript=1) ![](https://dc.ads.linkedin.com/collect/?pid=29224&fmt=gif)