Critical Infrastructure Security: Iranian PLC Attacks, Cyber Shield 2026, and DOJ Indictment
Key Questions
What is the focus of Cyber Shield 2026?
The National Guard's Cyber Shield 2026 exercise emphasizes OT defense for the power sector, integrating physical OT components into training scenarios.
Which hacktivist groups target critical infrastructure?
Pro-Russia and Iran-linked hacktivists use tools like TRK25 and VoltRuptor to target ICS/SCADA systems, with Iran's AI-enhanced operations posing additional risks including potential malware like ZionSiphon.
What did the DOJ indictment target in critical infrastructure attacks?
The DOJ indicted Russian bulletproof hosting operators enabling attacks on critical infrastructure, building on prior actions against ransomware facilitators.
Iranian state actors now actively targeting PLCs across US critical infrastructure (Rockwell, Schneider, Siemens) with detection guidance from IC3. National Guard's Cyber Shield 2026 exercise focuses on power sector OT defense. Pro-Russia and Iran-linked hacktivists target ICS/SCADA with tools like TRK25 and VoltRuptor. DOJ indicts Russian bulletproof hosting operators that enabled critical infrastructure attacks. Handala group remains a threat after ceasefire collapse.