[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-us-agencies-warn-hackers-are-exploiting-siemens-plcs":10,"sections":41},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":30,"tags":31,"sources":36,"feedback":40,"feedback_at":22,"cost_usd":40,"total_tokens":40},5788,"us-agencies-warn-hackers-are-exploiting-siemens-plcs","US agencies warn hackers are exploiting Siemens PLCs","Five agencies warn hackers are using AI tools to find and exploit Siemens industrial controllers, without naming the attackers' origin.","Five US agencies say hackers are actively exploiting Siemens S7-series industrial controllers, and using AI to speed up the process.\n\nA joint advisory from CISA, the NSA, the FBI, the Department of Energy, and the EPA says attackers are scanning the internet for S7 PLCs running outdated or poorly protected software, then building exploits from publicly available technical documentation. They are also using AI tools to find additional attack paths and adapt when operators put up new defenses. Some of the malicious files are dressed up with open-source industrial automation libraries so they look like ordinary monitoring software. The agencies list critical manufacturing, energy, water and wastewater, chemical, food and agriculture, and commercial facilities as the top targets, and call the threat active rather than theoretical.\n\nNotably, the advisory does not say who is behind the campaign. That is worth sitting with: it landed less than a month after separate attacks on water systems in several states that were widely attributed to Iran, but the two are not the same claim, and the agencies are not connecting them on the record. Conflating AI-assisted PLC hacking with Iranian hackers would be reading more into this warning than the government has actually said.\n\nThe advice for operators is the usual list - patch, isolate from the internet, lock down access, watch for anomalies - which says less about a new fix than about how many of these controllers are still sitting exposed online in the first place.","[\"siemens\",\"ics-security\",\"critical-infrastructure\",\"ai-security\"]","2026-08-22T13:57:17.000Z","2026-08-22T14:12:22.277Z","2026-08-22T14:12:34.206Z","published",null,[24],{"id":25,"reviewer":26,"round":27,"reason":28,"status":29},"editor-r1","editor",1,"Headline and dek assert 'Iranian hackers' as something the five agencies themselves said, but the source explicitly states the advisory did not specify the threat actors' origin — the Iran link is only inferred from a separate, earlier incident; rewrite the headline\u002Fdek (and tighten the body's 'likely tied to Iran' framing) so the attribution isn't stated more confidently than the agencies' actual claim.","resolved","security",[32,33,34,35],"siemens","ics-security","critical-infrastructure","ai-security",[37],{"name":38,"url":39},"Tom's Hardware","https:\u002F\u002Fwww.tomshardware.com\u002Ftech-industry\u002Fcyber-security\u002Fus-authorities-say-siemens-controllers-used-for-water-and-other-infrastructure-are-being-targeted-by-hackers-agencies-claim-threat-actors-use-ai-tools-to-generate-exploitation-scripts",0,{"sections":42},[43,48,51,56,61,66,71,76,81,86,91,96,101,106],{"name":44,"slug":45,"count":46,"latest_published_at":47},"AI","ai",3303,"2026-08-22T16:00:00.000Z",{"name":49,"slug":30,"count":50,"latest_published_at":18},"Security",454,{"name":52,"slug":53,"count":54,"latest_published_at":55},"Policy","policy",212,"2026-08-21T12:20:54.000Z",{"name":57,"slug":58,"count":59,"latest_published_at":60},"Deals","deals",179,"2026-06-29T20:02:07.000Z",{"name":62,"slug":63,"count":64,"latest_published_at":65},"Hardware","hardware",144,"2026-08-21T14:58:28.000Z",{"name":67,"slug":68,"count":69,"latest_published_at":70},"Consumer Tech","consumer-tech",95,"2026-08-18T16:05:00.000Z",{"name":72,"slug":73,"count":74,"latest_published_at":75},"Science","science",91,"2026-08-20T10:01:48.000Z",{"name":77,"slug":78,"count":79,"latest_published_at":80},"Software","software",73,"2026-08-18T07:51:50.000Z",{"name":82,"slug":83,"count":84,"latest_published_at":85},"Dev Tools","dev-tools",69,"2026-08-18T04:00:00.000Z",{"name":87,"slug":88,"count":89,"latest_published_at":90},"Startups","startups",49,"2026-08-22T10:10:57.000Z",{"name":92,"slug":93,"count":94,"latest_published_at":95},"Gaming","gaming",41,"2026-07-09T04:00:00.000Z",{"name":97,"slug":98,"count":99,"latest_published_at":100},"General","general",33,"2026-08-18T22:18:13.000Z",{"name":102,"slug":103,"count":104,"latest_published_at":105},"Reviews","reviews",20,"2026-06-24T12:00:01.000Z",{"name":107,"slug":108,"count":109,"latest_published_at":110},"How-To","how-to",6,"2026-06-16T09:00:00.000Z"]