Security agencies in the United States have issued a warning regarding an “active cyber threat” posed by foreign hackers employing artificial intelligence tools. Their main target appears to be American infrastructure, specifically the water supply system.
According to a report released on Wednesday by the Cybersecurity and Infrastructure Security Agency (CISA), there is a significant risk for owners and operators utilizing Siemens S7 Series programmable logic controllers (PLCs). The report advises, “All PLC owners and operators should apply relevant mitigations to reduce the risk to their devices and systems.” It further emphasizes that the Siemens-specific details in the advisory should be recognized as a part of the broader threat landscape.
Attempts have been made to contact Siemens for comments on this issue via email.
The advisory highlights that the threat actors are using artificial intelligence to create exploitation scripts masked as legitimate monitoring tools to target U.S.-based Siemens PLC installations. They are reportedly using Internet scanning services to locate PLCs exposed to the Internet that are running outdated software or are not adequately protected. The primary targets include infrastructure such as energy, water, wastewater, chemical, and commercial facilities.
This threat is not just theoretical; it is active and poses real dangers. Depending on various factors, exploiting poorly secured PLCs may lead to interruptions in critical industrial processes, safety incidents, equipment downtime or damage, data breaches, regulatory non-compliance, and potentially cascading effects across interlinked systems.
This story is still developing. More updates are expected.