Iran‑Backed Threat Actors Hit US CNI Providers via Internet‑Facing OT Assets (infosecurity-magazine.com)

• CISA confirms Iranian state-affiliated actors targeting US critical infrastructure.
• Exploitation of internet-facing OT assets causing service outages.
• Shift towards manipulating Industrial Control Systems (ICS) for financial damage.

"CISA has disclosed a coordinated campaign by Iranian-backed threat actors targeting exposed Operational Technology (OT) assets within US critical infrastructure. By exploiting vulnerabilities in internet-facing industrial control devices, attackers have successfully caused operational disruptions and financial impacts. This activity signals a shift in tactics, focusing on the convergence of traditional IT threats with industrial control system manipulation. The agency emphasizes that securing internet-accessible OT hardware is now a paramount security priority to prevent future kinetic impacts on utility sectors."