CISA Alert: Water Sector PLC Targeting
CISA alert: Threat actors targeting PLCs in Water and Wastewater Systems. This report includes current Censys-observed internet exposure for each named vendor.
Topic
Iran
8 posts
Iran-Linked Operators Suspected in ATG Breaches
Censys finds 6,502 ATG services on 6,057 hosts reachable on the public internet today. Every ATG service indexed in Censys is reachable without authentication.
Iranian-Affiliated APT Targeting of Rockwell/Allen-Bradley PLCs
FBI & CISA alert: 5,219 Rockwell PLCs exposed to Iranian APT exploitation. Censys threat intelligence reveals U.S. attack surface, IOC analysis & key findings from AA26-097A.
ICS & Iran, Part 2: Revisiting Exposure of Previously Targeted Devices
Tracking Internet exposure of ICS devices targeted by Iranian threat actors. Research covers Unitronics PLCs, Orpak SiteOmat, Red Lion & Tridium Niagara trends.
Exposure Brief: Iranian-Linked Wiper Attack on Global Medtech Firm Stryker
Handala's wiper cyberattack destroyed Stryker Corporation's global Windows environment via suspected Microsoft Intune compromise. Explore the Iran-linked threat intelligence and key defenses.
Hunting Cameras in the Dark: Finding Internet Cameras Before Adversaries Do
Discover how Censys identifies Internet-exposed IP cameras in Iran using threat intelligence, CVE data, and advanced search queries.
ICS and Iran: Exposure of Previously Targeted Devices
**Discover research on Internet-exposed critical infrastructure devices targeted by Iranian threat actors, including Unitronics PLCs and more. Learn key risks and exposure trends.**
Iran's Internet: A Censys Perspective
Iran's internet blackout since June 18, 2025: Censys research tracks host visibility, ASN recovery rates, and TIC transit bottlenecks across Iranian networks.