AI-Generated Exploit Scripts Target Siemens S7 PLCs in U.S. Critical Infrastructure

A U.S. government advisory warns of an active threat targeting critical infrastructure organizations, specifically Siemens S7 PLCs, utilizing AI-generated exploit scripts. Threat actors are leveraging internet scanning tools to identify vulnerable PLCs and then use AI to rapidly create and adapt exploitation scripts, focusing on reconnaissance, credential access, and denial of service. This represents a significant evolution in ICS attack capabilities, lowering the barrier to entry and increasing the speed of attacks. The activity is linked to a broader trend of AI-powered cyberattacks, including a separate, multi-agent attack targeting Taiwan.