fp.

Open in hackernews

Iranian hackers launching disruptive attacks at U.S. energy, water targets [pdf]

https://www.cisa.gov/sites/default/files/2026-04/AA26-097A-Iranian-Affiliated-Cyber-Actors-Exploit-Programmable-Logic-Controllers-Across-US-Critical-Infrastructure_508c.pdf

26•lschueller•2h ago

Comments

whynotmaybe•1h ago

Noob sidenote, TIL that you must "defang" ip addresses in security reports so you write it with brackets like 135.136.1[.]133.

This prevent it from being clickable.

lbourdages•1h ago

Links are also often modified with "hxxps" instead of "https". Link is still clickable but will not work.

Bender•1h ago

There was a day when many people used a Firefox addon that rewrote hxxps to https and would undefang the IP addresses. I can't remember what it's called but these days I use FoxReplace to do similar things. If I want to obfuscate things I typically base64 encode for the laptop and workstation users.

    Q3V6IEkgYW0gcGlwcGkgbG9uZ3N0b2NraW5ncyBob3BlIGFuZCBhIGhheSBhbmQgYSBob3BlIHNoYXcgbmF3Lg==

tencentshill•1h ago

Therefore...defund CISA?

ChrisArchitect•1h ago

Earlier release page: https://news.ycombinator.com/item?id=47679202

bcjdjsndon•10m ago

I see they've learnt a thing or two from stuxnet