U.S. Agencies Warn AI Scripts Target Siemens Industrial Controllers

The Federal Bureau of Investigation, alongside the National Security Agency and the Cybersecurity and Infrastructure Security Agency, issued an advisory warning that threat actors are using AI-generated exploitation scripts to target Siemens S7 Series programmable logic controllers. These industrial automation systems are used to monitor critical infrastructure, including water, energy, and chemical manufacturing sectors.

Government agencies noted that attackers are focusing on devices with outdated software or poor internet protection to conduct reconnaissance and develop capabilities. The advisory warns that these vulnerabilities could lead to equipment damage, safety incidents, and the disruption of critical industrial processes.

While the latest warning did not name a specific perpetrator, the Cybersecurity and Infrastructure Security Agency previously linked Iran-linked hackers to similar targets in July. Additionally, the cybersecurity organization Encrygma attributed attacks on U.S. water systems to CyberAv3ngers, a group linked to the Islamic Revolutionary Guard Corps.