Hackers linked to the Iranian government are reportedly disrupting operations at various critical infrastructure sites across the United States. A joint advisory from the FBI, Cybersecurity and Infrastructure Security Agency, National Security Agency, and other agencies indicates that since March 2026, an advanced persistent threat group has targeted programmable logic controllers (PLCs) in sectors such as energy, wastewater systems, and government facilities. These PLCs, which serve as an interface between automation computers and physical machinery, have been compromised, leading to operational disruptions and financial losses for some organizations. Security firm Censys identified 5,219 PLCs exposed to the Internet, with 75% of them located in the United States. The infrastructure used for these attacks involves a single multi-home Windows engineering workstation utilizing the Rockwell toolchain, indicating a sophisticated approach to targeting critical systems.