US security agencies have warned that hackers are actively targeting internet-connected Siemens controllers used in critical infrastructure, including water systems. The Cybersecurity and Infrastructure Security Agency (CISA), the FBI and the National Security Agency said on Wednesday that attackers are targeting all Siemens S7 programmable logic controllers, which are devices used to control automated processes in energy, water, manufacturing and agriculture.
CISA said the attacks are part of broader activity against water supply and wastewater systems across the United States. The agency warned that disruption could lead to downtime, safety incidents or equipment damage in critical infrastructure relying on these devices.
The agencies said the hackers are using AI to generate exploit scripts that rely on publicly available information to find and exploit controllers running outdated software or otherwise poorly secured. An incident response professional told TechCrunch it was noteworthy that hackers are using AI to identify and target vulnerable devices, but cautioned that these devices were already highly vulnerable.
The warning follows a series of cyberattacks by suspected Iranian hackers targeting US water suppliers in recent months. Officials have reported intrusions at water facilities in Minnesota, Michigan, Arkansas, Georgia and New Jersey.