Nearly 4,000 US industrial devices exposed to Iranian cyberattacks

Multiple high-impact security incidents and trends reported: Iranian-linked actors targeted U.S. critical infrastructure by scanning/exposing nearly 4,000 Internet-facing Rockwell Automation PLCs; a CPUID supply-chain compromise replaced CPU‑Z and HWMonitor downloads with malware; an Acrobat Reader zero‑day has been exploited since at least December; Smart Slider 3 Pro update infrastructure was hijacked to push backdoored WordPress/Joomla builds; new LucidRook Lua‑based malware is being used in targeted campaigns against NGOs and universities in Taiwan; a VENOM phishing‑as‑a‑service is siphons