Tenable warned that critical infrastructure operators face rising threats from Iran-linked groups and that AI-driven tools could accelerate mapping of IT and OT networks. The report highlights internet-exposed operational technology devices and cites CISA priorities including replacing unsupported devices and improving recovery planning.
Tenable published an industry risk analysis warning that Iran-linked groups pose rising threats to critical infrastructure operators. It flags a shift toward disruptive attacks on U.S. water, energy and government targets since Operation Epic Fury began in February.
The report says AI-driven tools may accelerate mapping of converged IT and OT networks, while legacy and hard-to-inventory OT assets increase exposure. It identifies internet-exposed devices, including programmable logic controllers, as potential entry points tied to operational disruption and financial loss. CISA guidance highlighted in the report recommends reducing vulnerabilities, replacing end-of-support devices and improving rapid recovery planning.
