U.S. agencies report cybercriminals used AI-generated code to crack Siemens PLCs What you’ll learn: - Multiple U.S. investigative agencies said cyberattackers used AI-generated code to target Siemens S7 Series PLCs, these in U.S. critical infrastructure. - The multi-agency advisory stated that the as-yet-unidentified attackers are using AI to develop Python exploitation scripts that use the 'snap7.dll' and 'python-snap7' libraries. - The reports follow an episode last fall when vulnerabilities were discovered in the Siemens RuggedCom ROXOS II multiservice platform but not exploited by threat actors, thanks to detection and patching. Far be it for us to toot our own horn, but we'll do so anyway: AI-powered cyberattacks on manufacturing and critical infrastructure are a thing, a very big thing. And we and our contributing writers have been telling you so for more than a minute. The latest news provides more proof. Dennis Scimeca grabbed this for our brands last week, based on advisories reflected at tech and cybersecurity news website BleepingComputer: Siemens manufacturing and critical infrastructure hardware has been coming under assault from cyberattackers, who most notably used AI-generated code to do so. See also: AI is superpowering cyberattacks, but manufacturers can cut their exposure The details: The U.S. National Security Agency, the FBI, the U.S. Department of Energy, the U.S. Environmental Protection Agency, and the U.S. Cybersecurity and Infrastructure Agency all jointly announced that cyberattackers had used or are using AI-generated code to target Siemens S7 Series programmable logic controllers, these specific ones embedded into critical infrastructure. Many of you are “boots-on-the-ground” in OT or IT so you know that PLCs are vitally important plant gear—and those from Siemens are some of the most widely used in manufacturing and other sectors. PLCs are the rugged, reliable brains that monitor inputs from sensors, execute custom user logic, and control physical