Nation-State Actors: Iran’s PLC Attacks,
Russia’s Zero-Click Email Exploit,
and North Korea’s Fake Employees

Three nation-states. Three distinct playbooks. Iranian actors are targeting internet-exposed industrial controllers and disabling critical safety systems.

A Russian threat group built a zero-click email exploit that steals 90 days of inbox data the moment a user views a message. And North Korean operatives are applying for software-development jobs at Western companies—and getting hired.

Join hosts John Dilgen and Tehman Tariq as they break down:

• How Iranian actors manipulate PLC safety logic while keeping operators in the dark
• Why Russia’s zero-click exploit creates a major email-security and data-exfiltration risk
• How North Korean operatives use forged and stolen identities to infiltrate organizations as employees

Two questions your organization should be asking right now:

1. Could your security team identify and secure internet-exposed PLCs, HMIs, and SCADA systems before an adversary does?
2. Does your hiring process include controls to detect AI-generated documents, stolen identities, and malicious job applicants?

John Dilgen: Cyber Threat Intelligence Analyst at ReliaQuest, where he specializes in researching cyber threats impacting ReliaQuest customers. With a strong technical background, he previously served as an Incident Response Analyst and Trainer at ReliaQuest.

Tehman Tariq: Sr. Manager of Cyber Operations at ReliaQuest, where he has spent a majority of his career leading Incident Response, Security Architecture, and Detection teams. He has worked hand in hand with CISOs to introduce automation that allows teams to mature their security programs.