Iranian state-sponsored hackers are actively targeting vulnerable Rockwell/Allen-Bradley programmable logic controllers (PLCs) connected to the internet, posing a significant threat to critical infrastructure organizations in the US. These hackers are exploiting exposed PLCs on networks, which could allow them to disrupt or manipulate industrial processes. The targeting of PLCs is particularly concerning, as they are used to control and monitor critical systems in sectors such as energy, water, and transportation. The US warning highlights the need for organizations to prioritize the security of their industrial control systems and take immediate action to protect against these types of threats1. This warning matters to security practitioners because it underscores the importance of securing internet-exposed industrial control systems to prevent potential disruptions to critical infrastructure, which could have severe consequences for public safety and the economy.