CyberzSOC

control and data acquisition (SCADA) displays, resulting in operational disruption and financial loss. U.S. organizations should urgently review the tactics, techniques, and procedures (TTPs) and indicators of compromise (IOCs) in this advisory for indications of current or historical activity on their networks, and apply the recommendations listed in the Mitigations section of this advisory to reduce the risk of compromise.  Rockwell Automation/Allen-Bradley manufactured PLCs Affected Products  Potentially other branded PLCs  Remove PLCs from direct internet exposure via secure gateway and firewall.  Query available logs for the provided IOCs in the corresponding time frames.  Check available logs for suspicious traffic on the ports associated with OT devices, including 44818, 2222, 102, and 502, especially traffic originating