Five US federal agencies have told industrial operators that attackers are already circling their plant floors. The National Security Agency, CISA, the FBI, the Department of Energy and the Environmental Protection Agency published a joint advisory on 19 August warning that threat actors are hunting for internet-exposed Siemens S7 series programmable logic controllers, the small rugged computers that open valves, run pumps and sequence production lines, and are probing them with exploitation scripts generated with the help of AI.
The agencies are unusually direct about what stage this is at. "This is not a theoretical risk", the advisory says, describing live activity rather than a research finding. They also widen the warning past a single vendor: the Siemens material is one subset of broader PLC targeting, and every PLC owner is told to apply the mitigations regardless of brand.
Reading the plant now, writing to it later
Attackers use internet scanning services such as Censys and ZoomEye to find S7 controllers that are exposed or poorly segmented, then walk in through devices left on default or barely configured authentication. From there they run Python scripts built around snap7, an open source library that speaks S7comm, the protocol Siemens controllers use, which hands them read and write access to PLC memory, configuration data and ladder logic. The scripts are dressed up to look like legitimate operational technology monitoring tools, so a security team glancing at the traffic sees something familiar.
The authoring agencies assess this is likely persistent reconnaissance meant to develop capability and pre-position for future operational effects, with read access used to learn an environment before any write operation that would actually disrupt it. The targeting spans the whole family, from the S7-200 and S7-300 through the S7-1200 and S7-1500, including F-series safety controllers.
Why AI turns up in an ICS advisory
The agencies call AI-assisted exploit writing an evolution in attacker capability, because it cuts both the expertise and the time needed to produce working ICS tooling. Industrial protocol work has historically been a specialist skill with a small talent pool, and that scarcity was quietly part of the defense. Public vulnerability information plus AI-assisted scripting collapses that barrier. IntelFusions has tracked the same drift elsewhere, including an attacker who let an AI agent pick its own targets.
Who sits in the blast radius
The sectors named as most targeted are Critical Manufacturing, Energy, Water and Wastewater, Chemical, Food and Agriculture, and Commercial Facilities, with the Defense Industrial Base flagged as another user of the same controllers. The listed consequences run from disrupted production and manipulated safety interlocks to equipment damage and cascading effects across interconnected facilities. The warning is aimed particularly at asset owners who rely on integrators or managed service providers for remote access and may not realize their controllers are reachable at all. It follows CISA's earlier warning about water utilities locked out of internet-facing PLCs, in the same US critical infrastructure estate.
Block TCP port 102, then count your controllers
The first instruction is an immediate inventory: verify firmware on every S7 controller against a known good copy, and map every engineering workstation running TIA Portal or STEP 7. Patch next, prioritizing internet-facing and DMZ-resident devices, and consult Siemens ProductCERT for model-specific advisories. Then audit firewall rules for exposed S7comm services and block TCP port 102 at the perimeter outright, turn on PLC password protection and read and write protection, restrict engineering access by MAC and IP allowlisting, and disable web servers and unused protocols. For detection, the agencies point at S7comm connections from anything that is not an engineering workstation, write operations outside change windows, sequential scanning on port 102, and snap7 imports on machines with no business loading them.
The advisory is published as AA26-231A, with the MITRE ATT&CK for ICS and D3FEND mappings in the full text. What makes it worth reading twice is not the hardening list, which has been broadly the same for a decade, but the reason given for publishing it now: the barrier to attacking a PLC has dropped, and the scanning has already started.
This briefing is provided by IntelFusions for informational and defensive purposes only. It is based on sources assessed to be reliable at the time of writing, and analytic judgments carry the confidence levels indicated. Indicators of compromise are defanged; re-arm them only in controlled environments. IntelFusions is not affiliated with the organizations named and makes no warranty as to completeness or accuracy.