Hackers Manipulate PLC Logic and Operator Displays Across U.S. Critical Infrastructure

Six federal agencies have updated a joint cybersecurity advisory warning that Iranian-affiliated threat actors are actively exploiting internet-exposed programmable logic controllers (PLCs) across U.S. government facilities, water systems, and energy infrastructure. The advisory, tracked as AA26-097A, was first published in April 2026 and revised on July 22, 2026, expanding its scope significantly. The threat actors scan the internet for exposed PLCs and connect using…

Diamond Model