The NSA, CISA, and FBI dropped a joint advisory that confirms what security researchers have suspected for years: attackers are now using AI to generate working exploit scripts for Siemens S7 programmable logic controllers. Not theoretical. Not a proof-of-concept. Active use against infrastructure that keeps water flowing, power grids running, and chemical plants operating.
The agencies are blunt about what changed. AI slashes the technical bar for attacking industrial control systems. Someone who previously needed deep knowledge of ladder logic, proprietary protocols, and memory layout can now prompt a model, iterate on the output, and land on a functional exploit. The time-to-exploit has collapsed. Where a capable attacker might have spent weeks or months developing a reliable script, AI compresses that to hours or days — and lets less-skilled actors play in a space that used to require nation-state resources.
The advisory names energy, water, chemical, and manufacturing as affected sectors and classifies this as an active threat, not a hypothetical one. The attack chain is depressingly simple: pull public vulnerability data, scan for internet-exposed PLCs, feed the findings to an AI model, and act on what comes back. Shodan has made the scanning part trivial for years. AI just closed the gap between finding a target and exploiting it.
There’s one wrinkle worth noting. The UK’s AI Safety Institute ran simulations where models attempted to hack operational technology end-to-end — and they failed. But not at the OT layer. They got stuck on the IT systems sitting in front of the devices, the corporate networks and jump boxes that gate access. That’s a meaningful distinction. The models handled the ICS-specific exploitation fine; the friction was in navigating the conventional enterprise stack. It suggests that AI is already dangerous where it matters most — and that the real bottleneck is still the human-shaped perimeter around the critical stuff. The full advisory with mitigations is available as a PDF, and if you run PLCs exposed to the internet, reading it should be your next task.
