Attackers are using AI to build exploits for industrial control systems, U.S. agencies warn
decoder ·
U.S. agencies, including the NSA, CISA, and FBI, have issued a joint advisory warning that attackers are using AI to create exploit scripts for industrial control systems, specifically targeting Siemens S7 programmable logic controllers. According to the agencies, AI dramatically lowers both the skill level and time required to develop working ICS exploits and malicious tools. AI also allows adversaries to quickly exploit additional attack vectors and adapt to defensive measures. Threat actors can gather public information about vulnerabilities, locate exposed PLCs on the internet, and use AI-generated scripts to attack them. The affected sectors include energy, water, chemical, and manufacturing, and the threat is classified as active. The advisory includes recommended mitigations. Separately, simulations by the UK's AI Safety Institute showed that AI models have so far failed to hack operational technology systems on their own, getting stuck on the IT systems in front of them rather than the devices themselves.
decoder