Vulnerabilità · 53 giorni fa
Per chi gestisce Siemens S7, il punto non è più solo chi vede il PLC da Internet. NSA, CISA, FBI, DOE ed EPA dicono che attaccanti stanno usando AI insieme a scanner pubblici e librerie OT open source per costruire strumenti che sembrano normali utility di monitoraggio, ma servono a sondare controller esposti e prepararne l’abuso.
Le agenzie indicano snap7 e python-snap7 come base di tool che imitano traffico OT legittimo. In pratica il programma appare routinario, ma può leggere memoria, configurazione e ladder logic, così da mappare l’ambiente con accesso di lettura e predisporre poi operazioni di scrittura più distruttive.
Per gli impianti con PLC raggiungibili da Internet o affidati a integratori con accesso remoto, la conseguenza è chiara: la difesa non si gioca solo sulla singola patch, ma sul contenimento dell’esposizione e sulla segmentazione del perimetro OT. Questo schema vale per S7-200, S7-300, S7-400, S7-1200 e S7-1500, e rende un PLC pubblicamente esposto un bersaglio raggiungibile molto più in fretta di prima.
13 fonti che coprono questa storia
Risky Bulletin: US warns of AI-assisted attacks against Siemens PLCs
The US warns of AI-aided attacks against Siemens PLCs, hackers breach Latvia's road traffic agency, a new hacking tool enrolls an attacker [Read More
AI-Generated Exploit Scripts Target Siemens S7 PLCs in U.S. Critical Infrastructure
agencies warn AI-generated exploit scripts target Siemens S7 PLCs, with exposed, outdated devices at risk across critical infrastructure.
CISA, NSA, FBI warn of Siemens S7 PLC exploitation using AI-generated scripts to disrupt critical industrial processes
US says hackers are targeting vulnerable water systems with the help of AI | TechCrunch
Hackers are targeting internet-connected Siemens controllers used in water facilities around the United States.
ICS Operators Warned of AI-Driven Attacks on Siemens PLCs
A US government advisory warned that attackers are deploying AI-generated exploitation scripts against exposed Siemens S7 Series PLCs
Siemens S7 PLC threat: What you need to know | Tenable®
New CISA advisory (AA26-231A) warns of active AI-assisted attacks on Siemens S7 Series PLCs.
US agencies warn of AI-powered attacks on Siemens industrial controllers - Help Net Security
AI-assisted attacks are targeting Siemens S7 PLCs used across water, energy, manufacturing and other critical infrastructure sectors.
Hackers Using AI to Target Siemens PLCs in Critical US Sectors
A cybersecurity advisory with technical details and recommendations has been written by the NSA, CISA and other agencies.
AI-fueled attacks pose ‘active threat’ to water, other sectors, U.S. agencies warn
Federal agencies warn hackers are using AI-generated scripts to target Siemens PLCs, threatening critical infrastructure like water, food, and energy grids.
The Record from Recorded Future
NSA, FBI warns of hackers using AI-generated tools in attacks on critical infrastructure technology
The National Security Agency (NSA), FBI and other federal agencies said the campaign is targeting Siemens S7 Series PLCs and was being fueled by “AI-assisted development” alongside exploitation of known vulnerabilities.
AI-backed campaign targeting vulnerable Siemens S7 devices, CISA and FBI warn
Hackers are developing scripts disguised as legitimate software in attacks aimed at multiple industries, including energy and water.
US warns of AI-powered attacks on Siemens PLCs in critical infrastructure
cybersecurity agencies warn that threat actors are using AI-generated scripts to exploit Siemens S7 Series programmable logic controllers (PLCs) in U.S.
Part of the PlainSec briefing for 2026-08-20