U.S. Agencies Warn of Hackers Actively Attacking Siemens S7 PLCs in Critical Facilities

The NSA, CISA, FBI, Department of Energy, and EPA issued a joint cybersecurity advisory on August 19 warning that threat actors are actively targeting Siemens S7 Series programmable logic controllers (PLCs) across America’s critical infrastructure. The agencies describe this as a live, ongoing threat rather than a theoretical risk, with attackers using AI-generated exploitation scripts disguised as legitimate monitoring tools to probe and manipulate Internet-exposed devices. According to the advisory, threat actors are leveraging Internet scanning services such as Censys and ZoomEye to locate Siemens S7 PLCs that are exposed to the public Internet or insufficiently segmented from corporate networks. Once a vulnerable device...

Read the full article at the source.