
On April 8, 2026, a joint advisory from the FBI, CISA, NSA, EPA, DOE, and US Cyber Command confirmed that Iranian-affiliated advanced persistent threat (APT) actors are actively exploiting internet-connected programmable logic controllers (PLCs) across multiple US critical infrastructure sectors. The attacks — attributed to actors linked to the CyberAv3ngers group and Iran’s Islamic…