U .S. federal agencies, including the NSA, CISA, FBI, DOE, and EPA, issued a warning about active AI-assisted hacking attacks targeting Siemens S7 programmable logic controllers (PLCs) across critical infrastructure sectors. The advisory highlights that attackers use AI-generated scripts disguised as legitimate tools to exploit vulnerabilities in outdated or poorly protected PLCs.
They leverage public scanning services to identify exposed devices, posing risks particularly in areas like critical manufacturing, energy, and water sectors. Defenders are advised to monitor unusual S7comm activity and prioritize patching and securing Internet-facing PLCs. Organizations are encouraged to verify third-party connections to these devices and implement rigorous security measures.