US federal agencies issued a joint warning about Iranian hackers. These hackers are actively breaching industrial control systems at water and energy providers. Programmable logic controllers are being targeted, disrupting operations and causing financial losses.
Operators must audit systems and disconnect them from the public internet. Strict multi-factor authentication is also being enforced for security.
Summary from source