Security agencies in the United States have issued warnings about an active cyber threat involving foreign hackers using AI tools. This threat targets American infrastructure, including the water supply.
The Cybersecurity and Infrastructure Security Agency (CISA) released a report on Wednesday highlighting vulnerabilities in control systems using Siemens S7 Series programmable logic controllers (PLCs). CISA advises owners and operators of these systems to implement necessary mitigations to protect their devices and systems. The advisory emphasizes that the Siemens-specific information is a part of a broader threat landscape.
Siemens was contacted for comment by Newsweek via email on Wednesday.
According to the advisory, threat actors are conducting reconnaissance and developing capabilities against U.S.-based Siemens PLC installations. They use AI-generated scripts that mimic legitimate monitoring tools to exploit these systems. Internet scanning services help them locate exposed PLCs with outdated or poorly protected software. Targeted infrastructure includes energy, water, wastewater, chemical, and commercial facilities.
The advisory stresses that this is an active threat, not just a potential risk. Exploiting poorly secured PLCs may result in disruptions to critical industrial processes, safety incidents, equipment downtime, data breaches, compliance violations, and further impacts on interconnected systems.
This is a developing story, and updates will be provided as they become available.
Leave a Reply