Nearly 4,000 US industrial devices exposed to Iranian cyberattacks

Multiple active and emerging threats reported across critical infrastructure, supply chains, and enterprise environments. Iranian-linked actors targeted thousands of Internet-exposed Rockwell Automation PLCs, highlighting an ICS/OT exposure risk; a supply-chain compromise at CPUID delivered malware via CPU‑Z and HWMonitor installers; and Smart Slider 3 Pro update servers were hijacked to push backdoored WordPress/Joomla builds. Adobe Acrobat/Reader zero-day exploitation has been observed in the wild since at least December. Targeted campaigns and tooling include the new Lua-based LucidRook (NG