Cybersecurity Advisory to Water Systems Regarding Iranian-Affiliated Cyber Attacks: EPA, FBI, CISA, NSA Issue Joint Advisory
April 08, 2026
By:
Walter G. Wright
Category:
Arkansas Environmental, Energy, and Water Law
Arkansas Environmental, Energy, and Water Law
Download PDF
Several federal agencies issued on April 7th a document titled:
Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers Across US Critical Infrastructure (“Advisory”).
The following federal agencies jointly issued the Advisory:
- Federal Bureau of Investigation.
- Cybersecurity and Infrastructure Security Agency.
- National Security Agency.
- Environmental Protection Agency.
- Department of Energy.
- United States Cyber Command – Cyber National Mission Force.
The Advisory states that Iran-affiliated advanced persistent threat (APT) actors are conducting exploitation activity targeting internet-facing operational technology devices. These include programmable logic controllers (“PLC”) manufactured by Rockwell Automation/Allen-Bradley.
The activity is stated to have led to PLC disruptions across several U.S. critical infrastructure sectors which include water and wastewater systems.
The Advisory includes:
- Background information.
- Similar Historical Activity Targeting Programmable Logic Controllers.
- Ongoing Threat Actor Activity Against U.S.-Based Programmable Logic Controllers.
- Technical Details.
- Initial Access.
- Command and Control.
- Impact.
- Indicators of Compromise.
- MITRE ATT&CK Tactics and Techniques.
- Mitigations.
- Network Defenders.
- Device Manufacturers.
- Validate Security Controls .
- Resources.
- Contact Information.
A copy of the Advisory can be found here.
The Between the Lines blog is made available by Mitchell, Williams, Selig, Gates & Woodyard, P.L.L.C. and the law firm publisher. The blog site is for educational purposes only, as well as to give general information and a general understanding of the law. This blog is not intended to provide specific legal advice. Use of this blog site does not create an attorney client relationship between you and Mitchell Williams or the blog site publisher. The Between the Lines blog site should not be used as a substitute for legal advice from a licensed professional attorney in your state.