CISA, EPA and partners provide details, mitigation actions on Iran-based cyber actors behind water system hacks

CISA and the Environmental Protection Agency have issued a joint cybersecurity advisory detailing the tools and tactics of Iran-based cyber actor CyberAv3ngers, which they have observed exploiting a vulnerability in programmable logic controllers used primarily in the water and wastewater sector.

CyberAv3ngers is affiliated with the Iranian government Islamic Revolutionary Guard Corps, an organization designated by the U.S. as a foreign terrorist organization. The seven-page advisory focuses on Israel-made Unitronics Vision Series programmable logic controllers and says the government...