Iranian-affiliated Advanced Persistent Threat actors are suspected of planning infrastructural cyberattacks on US private sector organizations, as warned by six US government agencies on April 7. The advisory hints at a possible connection to the "CyberAv3ngers" group, known for its 2023 attacks on US water and wastewater facilities. This group, along with another known as "Handala", is believed to be involved in state-aligned activities, shifting the threat model from criminal to geopolitical. The warning suggests a heightened risk of attacks on critical infrastructure, requiring organizations to adapt their defenses to a more complex and nation-state driven threat landscape1. This development matters to cybersecurity practitioners because it signals a need to adjust their strategies to counter the unique tactics and motivations of state-sponsored actors, rather than just focusing on traditional criminal threats.