Iranian-linked hackers have targeted nearly 4,000 internet-exposed industrial devices in the US, focusing on programmable logic controllers (PLCs) manufactured by Rockwell Automation.
The attack surface encompasses critical infrastructure networks across the country. Programmable logic controllers are essential components in industrial automation systems, controlling machinery and processes in manufacturing, utilities, and other sectors.
Rockwell Automation is a major supplier of PLCs and industrial control systems used extensively in US infrastructure. The exposure of these devices suggests inadequate network segmentation or security configurations that leave critical equipment directly accessible from the internet.
Iranian state-sponsored cyber groups have previously targeted US infrastructure as part of broader geopolitical tensions. The discovery highlights ongoing vulnerabilities in industrial control systems, where legacy equipment often lacks modern security features.
Experts recommend air-gapping critical systems, implementing network segmentation, and deploying intrusion detection systems. Organizations operating PLCs should audit their network exposure and apply available security patches and updates from Rockwell Automation.
Google is rolling out Encrypted Client Hello (ECH) support in Android 17 to prevent network monitoring of user browsing activity. The privacy feature strengthens connection security across cellular and home networks.
A new survey shows more Americans oppose police use of license plate readers than support them. The finding reflects growing concerns about surveillance overreach.
The U.S. Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) has confirmed a "major incident" involving a compromised system following claims by the Qilin ransomware group.
Claude, Codex, and Hermes generated 227 install commands referencing code with no identifiable owners, according to analysis of corporate documentation. The discovery raises security concerns about AI-generated dependencies.