CISA and US Intelligence Agencies Warn of AI-Generated Exploits Targeting Siemens S7 PLCs in Critical Infrastructure

US intelligence agencies, the Department of Energy, and the EPA have issued a joint cybersecurity advisory regarding an ongoing campaign targeting Siemens S7 Series Programmable Logic Controllers (PLCs). Threat actors are reportedly using internet scanning tools to find exposed PLCs with outdated software and deploying AI-generated exploit scripts disguised as legitimate system monitoring tools. This represents a significant escalation in operational technology attacks, primarily aimed at critical national infrastructure.