CISA Updates Iranian-Affiliated PLC Targeting Advisory (AA26-097A)

(TLP:CLEAR) CISA and its partner agencies updated the joint Cybersecurity Advisory (CSA) AA26-097A “Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers Across U.S. Critical Infrastructure.” The original advisory warns of ongoing Iranian-affiliated state-sponsored targeting of internet-connected OT devices, including programmable logic controllers (PLCs). Most notably, utilities and integrators operating, maintaining, or providing support for PLCs from the manufacturers mentioned in this advisory are strongly recommended to remove PLCs from direct internet exposure via secure gateway and firewall. Utilities may need to work with IT/OT team members and/or integrators to perform this action…