[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fRp-k6hAr7ojT3-zxadIgADAtWAiENkV4gM-RQwZoi40":3},{"article":4,"iocs":46,"watch_terms":54},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":13,"published_at":14,"ingested_at":15,"relevance_score":16,"entities":17,"category_id":26,"category":27,"article_tags":30},"7f2bf4b1-7385-4412-8177-a237d67067bb","Iranian Threat Actors Disrupt US Critical Infrastructure Via Exposed PLCs","iranian-threat-actors-disrupt-us-critical-infrastructure-via-exposed-plcs-cfe2ec","Attackers compromised Internet-facing OT devices and caused file and display manipulation, operational disruption, and financial losses across sectors.","Iranian state-sponsored attackers exploited Internet-facing programmable logic controllers (PLCs) to compromise US critical infrastructure systems across multiple sectors. The intrusions resulted in file and display manipulation, operational disruption, and financial losses. The attack highlights the persistent threat from nation-state actors targeting vulnerable OT\u002FICS environments.","Iranian threat actors disrupted US critical infrastructure by compromising exposed programmable logic controllers.",null,"https:\u002F\u002Fwww.darkreading.com\u002Fics-ot-security\u002Firanian-threat-actors-us-critical-infrastructure-exposed-plcs","https:\u002F\u002Feu-images.contentstack.com\u002Fv3\u002Fassets\u002Fblt6d90778a997de1cd\u002Fbltf78624b1d77fea5d\u002F69d630b2a8e6234a48182a2f\u002Firan1800_Hakan_Gider_alamy.png?width=1280&auto=webp&quality=80&disable=upscale","2026-04-08T13:46:29+00:00","2026-04-08T16:00:09.796588+00:00",8,[18,21,24],{"name":19,"type":20},"Iranian state-sponsored actors","threat_actor",{"name":22,"type":23},"Programmable Logic Controllers (PLCs)","technology",{"name":25,"type":23},"OT\u002FICS (Operational Technology \u002F Industrial Control Systems)","6cbdd207-aaa1-4176-9534-e156b125e917",{"id":26,"icon":11,"name":28,"slug":29},"Nation-state","nation-state",[31,36,41],{"category":32},{"id":33,"icon":11,"name":34,"slug":35},"c5eccf7c-abbc-4bd3-bbed-e6da5cba8e73","Incident Response","incident-response",{"category":37},{"id":38,"icon":11,"name":39,"slug":40},"d6f63bb8-0801-486a-be7f-171400700454","IoT\u002FOT","iot-ot",{"category":42},{"id":43,"icon":11,"name":44,"slug":45},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[47,51],{"type":48,"value":49,"context":50},"mitre_attack","T1190","Exploitation of exposed Internet-facing OT devices",{"type":48,"value":52,"context":53},"T1657","Operational disruption and file manipulation of critical systems",[]]