Leaders in steel, manufacturing, energy, water utilities, and other heavy industries should heed urgent warnings about Iranian-backed hackers infiltrating computer systems that run factory machinery, power plants, water facilities, and government sites. These attacks, which intensified since March amid U.S.-Iran tensions, cause shutdowns, production halts, and financial losses by tampering with control screens and settings on vulnerable internet-connected gear like Rockwell Automation controllers common across these operations. Outdated systems risk real-world chaos, as past strikes on global steel plants demonstrate with forced emergency stops and manual overrides that could hit U.S. facilities next, amplifying supply chain disruptions and costs.
The broader critical infrastructure faces similar threats, with suppliers caught in the crossfire and operations from orders to shipping at risk. Factories must disconnect internet-facing controllers, lock down access, and monitor for odd activity.
Key steps include disconnecting internet-facing controllers immediately, enabling security like multi-factor authentication and firewalls, and reviewing logs for suspicious IPs such as 185.82.73.0/24 and ports 44818 and 502.
Learn more and download the full joint advisory from the FBI’s IC3 site: https://www.ic3.gov/CSA/2026/260407.pdf.