[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fpcfVoXO0hlCaLnoJ2LHVsp5pKgymLXwX6AF3UcKoWDw":3},{"lesson":4},{"id":5,"slug":6,"article_id":7,"title":8,"body":9,"prevention":10,"framework_refs":11,"framework_notes":19,"status":20,"created_at":21,"published_at":22,"article":23,"tags":27,"podcasts":40,"controls":53},"4c9b6470-0111-409d-81be-6d3bac254627","iranian-cyber-attacks-exploit-thousands-of-unpatched-industrial-control-systems","ce1ff6b5-b1ef-421c-8fb8-d88879aa46ca","Iranian Cyber Attacks Exploit Thousands of Unpatched Industrial Control Systems","Iranian government hackers successfully targeted over 3,900 critical infrastructure devices across US energy, water, and government facilities by exploiting vulnerable Rockwell Automation programmable logic controllers exposed to the internet. The attacks were enabled by poor vulnerability management practices, including the use of end-of-life software and failure to properly secure industrial control systems. This incident demonstrates how inadequate network segmentation and exposure of critical operational technology to public networks creates significant national security risks. The financial losses and operational disruptions highlight the critical importance of treating industrial control systems with the same security rigor as traditional IT infrastructure.","**Immediate actions:**\n- Conduct emergency inventory of all internet-exposed industrial control systems and PLCs\n- Patch or upgrade vulnerable Rockwell Automation devices to supported versions immediately\n- Implement firewall rules to block unauthorized internet access to operational technology networks\n\n**Long-term improvements:**\n- Establish strict network segmentation between IT and OT environments with monitored access points\n- Replace all end-of-life industrial control systems with supported versions on a prioritized schedule\n- Deploy continuous vulnerability scanning specifically designed for industrial control systems\n\n**Detection measures:**\n- Enable comprehensive logging on all industrial control devices and network boundary equipment\n- Implement behavioral monitoring to detect unusual communication patterns from OT devices\n- Establish incident response procedures specifically for operational technology environments",[12,13,14,15,16,17,18],"CIS Control 1","CIS Control 7","CIS Control 12","NIST SP 800-82","NIST CSF PR.IP-1","NIST CSF DE.CM-1","IEC 62443",{},"published","2026-04-09T22:09:28.36253+00:00","2026-04-09T22:09:28.181+00:00",{"id":7,"url":24,"slug":25,"title":26},"https:\u002F\u002Fcyberscoop.com\u002Firan-attackers-industrial-ot-government-energy-water-censys\u002F","iranian-attacks-on-us-critical-infrastructure-puts-3-900-devices-in-crosshairs-33dea6","Iranian attacks on US critical infrastructure puts 3,900 devices in crosshairs",[28,34],{"id":29,"name":30,"slug":31,"description":32,"color":33},"05757c8d-6b93-4194-b35d-7359e7d33b0e","Vulnerability Management","vulnerability-management","Missing scans, no risk prioritization","#fb923c",{"id":35,"name":36,"slug":37,"description":38,"color":39},"f43a7f30-5046-4b10-9dba-1a704139821e","Network Segmentation","network-segmentation","Lateral movement, flat networks, missing firewalls","#06b6d4",[41,47],{"id":42,"date":43,"edition":44,"title":45,"audio_url":46},"167ed0ba-dad4-49b6-bca2-4b6eec766cd8","2026-04-11","afternoon","ThreatNoir Weekend Brief — April 11","https:\u002F\u002Fcdn.threatnoir.com\u002Fpodcasts\u002F2026-04-11\u002Fthreatnoir-afternoon-brief-2026-04-11.mp3",{"id":48,"date":49,"edition":50,"title":51,"audio_url":52},"714b0cbb-42f0-4c49-ba31-f2788a43c914","2026-04-10","morning","ThreatNoir Morning Brief — April 10","https:\u002F\u002Fcdn.threatnoir.com\u002Fpodcasts\u002F2026-04-10\u002Fthreatnoir-morning-brief-2026-04-10.mp3",[54,58,61],{"slug":55,"name":56,"problem":57},"attack-surface-management","External attack surface management (EASM)","You find your forgotten internet-facing systems before attackers do.",{"slug":37,"name":59,"problem":60},"Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",{"slug":62,"name":63,"problem":64},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection."]