Iranian APTs Target Exposed Industrial Control Systems

Cyber Threat Intelligence reports that Censys researchers have identified 5,219 Rockwell PLCs exposed online, making them vulnerable to attacks by Iranian APTs. A significant majority of these exposed devices are located within the United States. This discovery underscores a critical risk to industrial control systems (ICS), which, if compromised, could lead to severe operational disruptions or even physical damage.

The findings from Censys highlight the ongoing threat landscape where nation-state actors are actively probing and exploiting internet-exposed critical infrastructure. The vulnerability of these PLCs, which are foundational components in many industrial environments, means that defenders must prioritize their security. Disconnecting them from public internet access or implementing robust segmentation and access controls are paramount to mitigating these risks.