State-linked and hacktivist attacks pressure critical infrastructure

Dragos attributes a four-day UK power-plant outage to Iranian operators using vendor compromise, supply-chain access, and PLC tampering; pro-Russia activity also targeted North American water systems. Research identified compromised credentials at 1,787 U.S. water organizations, including at least 250 with apparent operational or remote-access exposure. Attribution and incident scope remain partly unverified.