CISA Warns of Iranian Cyberattacks on U.S. Water Infrastructure

The Cybersecurity and Infrastructure Security Agency (CISA), partnering with the FBI, National Security Agency, and Department of Energy, announced in early April 2026 that Iranian-backed threat actors targeted United States water and wastewater infrastructure and other critical facilities. Officials stated the attacks mirrored tactics used in 2023 by CyberAv3ngers, a collective affiliated with the Islamic Revolutionary Guard Corps that previously targeted operational technology and programmable logic controllers.

In response to these escalating threats, Cyber Florida and SimSpace conducted the Jack Voltaic (JV) Tampa cyber resilience exercise. The simulation involved more than 100 organizations from the private sector, energy sector, armed forces, and government. The exercise aimed to validate operational readiness and improve cross-functional collaboration to defend mission-critical infrastructure against sophisticated network intrusions.