Iranian Cyber Activity Rises Amid Trump’s Infrastructure Threats

U.S. Intelligence agencies have issued an urgent warning to private-sector companies nationwide regarding an escalation in cyber operations conducted by Iranian actors targeting critical U.S. Infrastructure.

A joint advisory released on April 7, 2026, by the FBI, the Cybersecurity and Infrastructure Security Agency (CISA), the National Security Agency (NSA), the Environmental Protection Agency (EPA), the Department of Energy, and Cyber Command stated that these campaigns have already caused disruptions to systems.

Targeting of Industrial Automation Systems

The cyber operations have specifically targeted programmable logic controllers across critical infrastructure. According to the government notice, which was first reported on April 7, 2026, by The Times, the attacks focused on products from Rockwell Automation’s Allen-Bradley, one of the most widely used brands for industrial automation.

The advisory notes that Tehran’s targeting campaigns against U.S. Organizations have escalated, which officials suggest is likely a response to ongoing hostilities involving Iran, the United States, and Israel.

Geopolitical Context and Retaliation

The increase in cyber activity follows threats from President Trump to target Iranian infrastructure, specifically focusing on power plants and bridges. Concurrent with these cyber threats, U.S.-Israeli strikes hit the Sharif University of Technology in Tehran on April 7, 2026.

The threat environment surrounding U.S. Energy infrastructure had been accelerating prior to the current escalation, including tensions following airstrikes in February 2026.

Industry Defense Measures

While the Trump administration has downplayed indications of imminent risk, federal officials have urged energy companies to increase both physical and cybersecurity measures to defend against potential retaliatory attacks.

CISA has emphasized the need for increased vigilance for potential cyber activity against U.S. Critical infrastructure by state-sponsored or affiliated Iranian threat actors.