Connect with us

Politics

Iran attempting cyberattacks against U.S. critical infrastructure, officials say

Published

on

Iran attempting cyberattacks against U.S. critical infrastructure, officials say

U.S. intelligence agencies are “urgently warning” private sector companies throughout the nation that Iranian actors “are conducting exploitation activity” that has resulted in “disruptions across several U.S. critical infrastructure,” according to a government notice reviewed by The Times.

The Iranian cyber activity comes as President Trump is threatening to target Iran’s critical infrastructure in the coming hours, particularly its bridges and power plants.

Iran’s attack targeted products by Rockwell Automation’s Allen-Bradley, one of the most widely used industrial automation brands, according to the notice, which said that cyber actors affiliated with Iran were exploiting “programmable logic controllers across U.S. critical infrastructure.”

Tehran’s targeting campaigns against U.S. organizations “have recently escalated, likely in response to hostilities between Iran and the United States and Israel,” the notice warned.

“Iran-affiliated advanced persistent threat (APT) actors are conducting exploitation activity targeting internet-facing operational technology (OT) devices, including programmable logic controllers (PLCs) manufactured by Rockwell Automation/Allen-Bradley,” the notice reads.

Advertisement

“U.S. organizations should urgently review the tactics, techniques, and procedures (TTPs) and indicators of compromise (IOCs) in this advisory for indications of current or historical activity on their networks,” it continues.

The advisory was issued Tuesday jointly by the FBI, the Cybersecurity and Infrastructure Security Agency, the National Security Agency, the Environmental Protection Agency, the Department of Energy and Cyber Command.

Top executives from companies at the core of the nation’s ability to function — those leading America’s largest energy, water, transportation, and communications corporations — had already been taking it upon themselves to increase their vigilance over potential attacks, concerned that Trump’s willingness to target Iran’s critical infrastructure inadvertently put a mark on their backs.

Some fear Iran’s ability to conduct cyber operations that could take down transformers or power inverters, if not a wide-scale power system. Others are concerned about threats to brick-and-mortar sites from proxies of Tehran — physical attacks against facilities such as nuclear plants, or power management systems, the crown jewels of the sector.

Larger, even more capable actors, particularly Russia and China, may also take advantage of the fog of war to launch strikes themselves.

Advertisement

“There remains concern about Iranian cyber capabilities and retaliation if the U.S. carries through on threats to attack their infrastructure,” said Ernest Moniz, former U.S. secretary of energy under President Obama who helped negotiate the 2015 nuclear deal with Iran. “There may already be backdoors, Trojan horses and malware hidden in our infrastructure.”

“I have to believe that the government cyber experts — or what’s left of them — are working closely and indeed overtime with the power companies and other infrastructure operators on cyber defense and intrusion detection and warning,” Moniz added.

Iran has demonstrated an ability to penetrate networks tied to critical U.S. infrastructure before.

In 2015, Iran-backed hackers accessed data associated with Calpine Corp., one of California’s largest power producers, obtaining detailed engineering diagrams and credentials related to power plant systems. Some were labeled “mission critical.” U.S. officials feared at the time that the breach would allow Tehran to initiate blackouts nationwide.

Since that time, companies at the center of the U.S. energy and telecommunications sectors have markedly improved their defenses. But Iran’s offensive capabilities have improved, as well.

Advertisement

Large players in the energy sector are operating with “a watchful eye and an elevated posture right now,” said Pedro J. Pizarro, president and chief executive officer of Edison International, the parent company of Southern California Edison, one of the nation’s largest electric utilities.

Companies like Edison have been operating under persistent threat for over a decade. In 2024, a pair of devastating cyber espionage attacks targeting U.S. critical infrastructure attributed to Chinese hackers, Volt Typhoon and Salt Typhoon, were discovered after avoiding detection for at least three years.

The threat of a similarly latent attack — in which malware lies dormant in critical infrastructure systems, waiting for a signal to activate — is a real cause for concern in the sector, despite its best efforts and technological advances, experts and insiders said.

“The threat of cyber and physical attacks targeting critical infrastructure is not new,” said Jennifer DeCesaro, senior vice president of industry operations at the Edison Electric Institute, “which is why we partner with the government through the Electricity Subsector Coordinating Council to share actionable intelligence and prepare to respond to incidents that could affect our ability to provide electricity safely and reliably.”

The ESCC works closely with the National Security Council and its intelligence arms, particularly the intelligence agencies and Cybersecurity and Infrastructure Security Agency, or CISA, to coordinate regular briefings on safety standards, best practices and intelligence tips.

Advertisement

The CIA declined to comment. A spokesperson with CISA, listed as out of office due to the ongoing federal funding hiatus for the Department of Homeland Security, could not be reached for comment.

Last summer, announcing a 40% cut to the workforce of her office, Director of National Intelligence Tulsi Gabbard eliminated the Cyber Threat Intelligence Integration Center, previously seen as a critical fusion hub of information by private sector partners.

Asked to respond to the potential of retaliatory attacks against U.S. infrastructure, Karoline Leavitt, the White House press secretary, repeated the president’s threats.

“The Iranian regime has until 8PM Eastern Time to meet the moment and make a deal with the United States,” she said. “Only the president knows where things stand and what he will do.”

Trump has threatened to destroy every bridge and power plant in Iran if they fail to come to an agreement that ends its control over the Strait of Hormuz.

Advertisement

Ultimately, corporate executives shoulder much of the burden as the first line of defense for the country’s critical infrastructure, roughly 85% of which is owned by private sector companies.

Tom Fanning, former chief executive officer of Southern Co. and now executive committee chairman at the Alliance for Critical Infrastructure, said the threat from Iran is “credible.”

“I have not seen what I would describe as the existential threat, to take down a wide-ranging power system,” Fanning said. “Could those things be turned on? Sure. Is the United States critical infrastructure prepared to act? I think so.”

Last month, early on in the war, the Los Angeles Metro transit system was forced to shut down a portion of its network due to a hack. Authorities say it is still unclear who was behind the breach, but a source told The Times that Iran-backed hackers are being investigated as the potential culprit.

The transportation agency said its security team had “discovered unauthorized activity,” and were making sure its roughly 1,400 servers were secure before bringing them back online. The agency has emphasized the hack did not impact passengers’ commute time.

Advertisement

The FBI said it was aware of the hack. Homeland Security is working with local partners “to address cyber threats to critical infrastructure,” an official said.

“The reality is that the threats are here and now,” Fanning added. “The truth is, the bad guys are already here.”

Times staff writers Kevin Rector, Richard Winton and Rebecca Ellis, in Los Angeles, contributed to this report.

Advertisement

Politics

Iran ceasefire deal frays as attacks continue; Trump’s peace terms remain unclear

Published

on

Iran ceasefire deal frays as attacks continue; Trump’s peace terms remain unclear

A day after the United States and Iran agreed to a two-week ceasefire, the tentative truce showed early signs of strain amid continuing attacks across the region and reports that Iran moved to restrict traffic through the Strait of Hormuz.

The developments tested President Trump’s ability to convert a fragile pause in fighting into a lasting peace deal with a country he has spent weeks threatening to destroy, and raised questions about whether the Trump administration had the diplomatic leverage to hold the deal.

Defense Secretary Pete Hegseth and the White House sought to project confidence at separate news briefings on Wednesday, and warned Iran to keep its end of the bargain or face the consequences.

Hegseth said the U.S. military plans to maintain a presence in the region to ensure Iranian compliance, saying American troops are ready to “go on offense and restart operations at a moment’s notice” if the truce broke down.

“We’ll be hanging around,” he said. “We are going to make sure Iran complies with this ceasefire and then ultimately comes to the table and makes a deal.”

Advertisement

The warning came as several Gulf nations reported Iranian missile and drone attacks on their territories despite the ceasefire being in effect. Kuwait said its air defenses intercepted drones, while Bahrain reported that an Iranian attack has sparked a fire at one of its facilities.

Hegseth downplayed the continued Iranian attacks in the region, saying that “it takes time sometimes” for ceasefires to take hold, but advised Iran to “find a way to get a carrier pigeon to their troops in remote locations” and ensure compliance moving forward.

Israel added to the regional turmoil on Wednesday, carrying out its largest strike against Hezbollah since the militant group began launching rockets in solidarity with Iran last month. Lebanese health authorities said hundreds were killed and wounded in the strikes.

Trump and Israeli Prime Minister Benjamin Netanyahu have both maintained that Lebanon is not subject to the agreed upon terms to pause the hostilities.

Pakistani Prime Minister Shehbaz Sharif, who helped broker the ceasefire, wrote on X that violations to the ceasefire had been reported at “a few places across the conflict zone” and urged all parties to exercise restraint. Though he did not detail the violations, he said the attacks “undermine the spirit of the peace process.”

Advertisement

The regional instability appeared to push the Iranian Navy to restrict traffic through the Strait of Hormuz, a crucial waterway whose opening was key in the ceasefire negotiations, according to Fars News, an Iranian news outlet aligned with the Islamic Revolutionary Guard Corps.

“Any vessel trying to travel into the sea … will be targeted and destroyed,” the Navy told shipping vessels, according to the Fars News report.

At a press briefing Wednesday, White House Press Secretary Karoline Leavitt said Trump was aware of the media reports that the Strait of Hormuz had been closed, a move that she called both “completely unacceptable” and “false.” She added that the president’s expectation is that the waterway will be “reopened immediately, quickly and safely.”

Hegseth told reporters earlier in the day that “commerce will flow” through the Strait of Hormuz with the ceasefire in effect. Leavitt, however, sidestepped questions about who currently has control over the oil route.

The situation in the Strait of Hormuz underscores how much remains uncertain about the agreement between the United States and Iran. The full terms of the ceasefire have not been publicly disclosed, and Trump wrote on Truth Social the “only group of meaningful ‘POINTS’ that are acceptable to the United States” will be discussed behind closed doors.

Advertisement

Trump also seemed to take issue with the 10-point peace plan that Iran publicly released on Wednesday. He said that there are terms being floated by people that have “absolutely nothing to do” with the negotiations between the United States and Iran. He said that “in many cases, they are total Fraudsters, Charlatans, and WORSE.”

Leavitt declined to offer details about the working proposal being negotiated, saying the talks will take place privately. Both Leavitt and Hegseth, however, mentioned that the United States wants to ensure Iran does not have stockpiles of enriched uranium, the fissile material that is key in developing nuclear weapons.

“This is on the top of the priority list for the president and his negotiating team as they head into the next round of discussions,” Leavitt said.

Hegseth told reporters earlier in the day that Iran may “hand it over.” If they don’t, Hegseth said: We will take it out, or if we have to do something else ourselves like we did [with] Midnight Hammer or something like that, we reserve that opportunity.”

Leavitt reiterated that administration officials “hope it will be through diplomacy,” but left open the possibility that it could be retrieved through ground operations.

Advertisement
Continue Reading

Politics

Video: Acting Attorney General Says Only Trump Knows Why Bondi Was Fired

Published

on

Video: Acting Attorney General Says Only Trump Knows Why Bondi Was Fired

new video loaded: Acting Attorney General Says Only Trump Knows Why Bondi Was Fired

transcript

transcript

Acting Attorney General Says Only Trump Knows Why Bondi Was Fired

The acting attorney general, Todd Blanche, said during his first news conference on Tuesday that “nobody has any idea” why President Trump fired Pam Bondi last week.

Nobody has any idea why the attorney general is no longer the attorney general and I’m the acting attorney general, except for President Trump. I grow tired of people in the media saying why President Trump did or did do something, because President Trump’s only one that knows that. I did not ask for this job. And if President Trump chooses to keep me as acting, that’s an honor. If he chooses to nominate me, that’s an honor.

Advertisement
The acting attorney general, Todd Blanche, said during his first news conference on Tuesday that “nobody has any idea” why President Trump fired Pam Bondi last week.

By Jackeline Luna

April 7, 2026

Continue Reading

Politics

AOC doubles down on call for Trump’s ouster even after ceasefire announcement

Published

on

AOC doubles down on call for Trump’s ouster even after ceasefire announcement

NEWYou can now listen to Fox News articles!

Rep. Alexandria Ocasio-Cortez, D-N.Y., continued calling for President Donald Trump’s ouster on Tuesday even after the president announced a two-week ceasefire with Iran.

Advertisement

“This statement changes nothing,” she asserted in a post on X, referring to the president’s Tuesday evening ceasefire announcement. “Whether by his Cabinet or Congress, the President must be removed from office.”

Prior to the ceasefire announcement, Trump, who had been threatening to unleash a devastating attack against Iranian power plants and bridges, sent the following warning in a Tuesday morning Truth Social post: “A whole civilization will die tonight, never to be brought back again. I don’t want that to happen, but it probably will. However, now that we have Complete and Total Regime Change, where different, smarter, and less radicalized minds prevail, maybe something revolutionarily wonderful can happen, WHO KNOWS?”

Ocasio-Cortez, a member of the progressive cadre of lawmakers known as “The Squad,” responded by declaring in a post on X, “This is a threat of genocide and merits removal from office. The President’s mental faculties are collapsing and cannot be trusted. To every individual in the President’s chain of command: You have a duty to refuse illegal orders. That includes carrying out this threat.”

But then on Tuesday night, Trump announced a two-week ceasefire.

TRUMP AGREES TO 2-WEEK CEASEFIRE IF IRAN OPENS STRAIT OF HORMUZ

Advertisement

U.S. Rep. Alexandria Ocasio-Cortez, D-N.Y., speaks during a rally on March 21, 2025, at Civic Center Park in Denver, Colo. (Chet Strange/Getty Images)

“Based on conversations with Prime Minister Shehbaz Sharif and Field Marshal Asim Munir, of Pakistan, and wherein they requested that I hold off the destructive force being sent tonight to Iran, and subject to the Islamic Republic of Iran agreeing to the COMPLETE, IMMEDIATE, and SAFE OPENING of the Strait of Hormuz, I agree to suspend the bombing and attack of Iran for a period of two weeks. This will be a double sided CEASEFIRE!” the president wrote in part of a Truth Social post. “Almost all of the various points of past contention have been agreed to between the United States and Iran, but a two week period will allow the Agreement to be finalized and consummated.”

Iranian Minister of Foreign Affairs Seyed Abbas Araghchi said in part of a statement, “If attacks against Iran are halted, our Powerful Armed Forces will cease their defensive operations. For a period of two weeks, safe passage through the Strait of Hormuz will be possible via coordination with Iran’s Armed Forces and with due consideration of technical limitations.”

But even in light of Trump’s ceasefire announcement, Ocasio-Cortez asserted that the president’s “statement changes nothing.”

“The President has threatened a genocide against the Iranian people, and is continuing to leverage that threat. He has launched a massive war of enormous risk and of catastrophic consequence without reason, rationale, nor Congressional authorization – which is as clear a violation of the Constitution as any. Each day this goes on, the risk and criminality of these actions escalate for our nation and the world,” she wrote in the post on X.

Advertisement

EX-TRUMP ALLY MARJORIE TAYLOR GREENE JOINS LEFT-WING CALLS FOR THE 25TH AMENDMENT AS IRAN DEADLINE NEARS

U.S. President Donald Trump speaks during a news conference in James S. Brady Press Briefing Room of the White House on April 6, 2026, in Washington, D.C. (Anna Moneymaker/Getty Images)

“Moreover, this administration’s self enrichment, insider trading, and pure corruption off this chaos – from crypto currencies to predictive trading markets to bribe ‘settlements’ – has placed the Trump administration’s pursuit of personal wealth squarely against the wellbeing of our nation and its people. All of these incidents, and plenty more, have clearly driven our country past the threshold for impeachment or invocation of the 25th amendment,” she continued.

“We cannot risk the world nor the wellbeing of our nation any longer. None of these considerations should be partisan, but shared in good faith by Americans of all backgrounds who care for the safety and stability of the United States. Whether by his Cabinet or Congress, the President must be removed from office. We are playing with the brink,” she wrote.

AOC TELLS TROOPS TO REFUSE ‘ILLEGAL’ ORDERS AHEAD OF TRUMP’S LOOMING IRAN DEADLINE

Advertisement

Rep. Alexandria Ocasio-Cortez (D-NY) waves to the crowd ahead of Zohran Mamdani’s inauguration as the 112th mayor at City Hall on Thursday Jan. 1, 2026 in New York, NY. (David Dee Delgado/Getty Images)

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Fox News Digital reached out to the White House for comment early on Wednesday.

Continue Reading

Trending