US warns of AI-assisted attacks against Siemens PLCs

Federal authorities issued a joint cybersecurity advisory warning that unidentified threat actors are utilizing artificial intelligence to target programmable logic controllers manufactured by Siemens. The National Security Agency, the Cybersecurity and Infrastructure Agency, the Federal Bureau of Investigation, the Department of Energy, and the Environmental Protection Agency stated that attackers are employing AI-generated scripts to scan for internet-exposed industrial control systems and develop custom exploitation tools. The activity specifically focuses on Siemens S7 series devices across critical sectors, including energy, water treatment, manufacturing, chemicals, and agriculture. While officials noted no major disruptions or active high-impact attacks have been confirmed yet, the campaign represents persistent reconnaissance designed to prepare for potential future operational disruptions. Authorities urged critical infrastructure operators to immediately audit hardware inventories, apply critical security patches, isolate operational technology networks from the public internet, and strengthen device-level access controls to mitigate escalating risks.