xploitzone.com • 1d
Iranian State-Sponsored Disruption of UK Power Plant and US Water Utilities
Iranian state-sponsored actors executed a coordinated disruptive cyber campaign targeting Critical National Infrastructure (CNI), resulting in a four-day operational shutdown of a small British power plant in July 2026. The attack utilized specific TTPs to bridge the IT/OT gap, exploiting vulnerabilities in Industrial Control Systems (ICS) and SCADA environments. This operation was synchronized with simultaneous attacks on over 30 US community water utilities, utilizing shared Indicators of Compromise (IoCs) and malware payloads designed to trigger system shutdowns. The campaign signals a strategic pivot from traditional espionage to high-impact kinetic-effect disruption against Western-allied power and water grids.