Iranian Hackers Target Siemens and Schneider Industrial Systems, CISA Warns (infosecurity-magazine.com)

• Iranian APT group (CyberAv3ngers) targets PLCs from multiple vendors.
• Affected models: Siemens S7-1200, Schneider BMX P34, Allen-Bradley CompactLogix.
• CISA recommends disconnecting PLCs from the internet and checking for IOCs.

"CISA warns that Iranian cyber actors are actively targeting industrial control systems from Siemens and Schneider Electric, among others. Attackers use configuration software to steal project files and manipulate PLCs, causing operational disruption. Affected models include Siemens S7-1200 and Schneider BMX P34. The advisory provides indicators of compromise and mitigation steps."