// PC GAMER — GAMING
'This is not a theoretical risk—it is an active threat': The NSA, FBI, CISA and more warn of AI-assisted hacks against critical US infrastructure and facilities
Energy, water management, manufacturing facilities and more are said to be vulnerable.
When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works.
A cybersecurity advisory jointly authored by multiple US agencies, including the NSA, CISA, FBI, DOE, and EPA, warns the owners and operators of industrial facilities of an "active cyber threat" to Siemens S7 programmable logic controllers.
"The threat actors are conducting reconnaissance and capability development against US-based Siemens PLC installations using AI-generated exploitation scripts disguised as legitimate monitoring tools," says the advisory.
"The US critical infrastructure sectors most targeted by this threat activity include critical manufacturing, energy, water and wastewater, chemical, food and agriculture, and commercial facilities. This is not a theoretical risk—it is an active threat."
Essentially, it reads like a list of some of the most important infrastructure facilities behind the lives of the average US citizen (via The Register). The threat actors are said to be leveraging open source automation libraries to create custom tools that mimic existing monitoring solutions, which are capable of evading detection by security teams.
These tools and scripts are said to be conducting read/write operations on data blocks, "potentially for reconnaissance, capability testing, or pre-positioning for effects operations."
The advisory notes that the use of AI to generate exploits represents "an evolution in threat actor capabilities," and that it "dramatically [reduces] the technical expertise and time required to develop working ICS exploitation scripts and malicious tools."
The advisory also says that, as the Siemens S7 Series PLCs are used in other sectors, including the Defense Industrial Base (DIB), they could also be targeted. As for the potential damage that could be caused, the list is rather long.
Keep up to date with the most important stories and the best deals, as picked by the PC Gamer team.