What does CISA recommend for vulnerable PLCs?

Isolate them from the internet immediately using firewalls and gateways; block ports 44818, 2222, 102, 502; audit logs for suspicious activity.

Who are the Iranian hackers behind these attacks?

Likely CyberAv3ngers, tied to Iran's IRGC, known for similar OT exploits since 2024, per CISA and FBI intel.

Harden PLCs—no direct web exposure, disable unused remote access, follow Rockwell/Allen-Bradley patches, monitor with FBI-listed IPs.

🔧 AI Hardware

Ever wonder if your tap water's flow depends on a hacker in Tehran? CISA says yes—and they're screaming for fixes on exposed PLCs right now.

theAIcatchup Apr 10, 2026 4 min read 22 views

CISA urges urgent isolation of internet-facing Rockwell/Allen-Bradley PLCs to block Iranian hackers. 𝕏
Targeted sectors: water, energy, municipal services—risk of data manipulation and outages. 𝕏
Block key ports (44818, 2222, 102, 502) and audit logs immediately for defense. 𝕏

Written by

Hardware and infrastructure reporter. Tracks GPU wars, chip design, and the compute economy.

#CISA alert #Iranian hackers #PLCs cybersecurity #critical infrastructure

Get the best AI stories of the week in your inbox — no noise, no spam.

Originally reported by Tom's Hardware - AI