Iranian hackers have been conducting sabotage operations against critical infrastructure in the US, specifically targeting energy and water systems. These digital attacks are believed to be a retaliatory measure in response to threats made by the US government against Iranian infrastructure. The hackers have been exploiting vulnerabilities in unpatched systems, highlighting the need for improved cybersecurity measures in these critical sectors. The attacks have been linked to Iranian threat actors, who have been using tactics such as spear phishing and exploit kits to gain access to sensitive systems1. The vulnerability of these systems is a major concern, as a successful attack could have devastating consequences for the US population. So what matters to practitioners is that these attacks underscore the importance of prioritizing cybersecurity in critical infrastructure, particularly in the energy and water sectors, to prevent potentially catastrophic disruptions.