AI-Assisted Cyberattacks Target US Water Systems, Officials Warn

US cybersecurity agencies, including CISA, the FBI, and the NSA, have warned that hackers are actively targeting Siemens S7 programmable logic controllers (PLCs) used in critical infrastructure. These devices control automated processes in energy, water, manufacturing, and agriculture, and attacks could cause outages, safety incidents, or equipment damage.

Hackers are using AI to generate exploit scripts and find vulnerable PLCs through public information. Older or poorly secured devices are especially at risk. CISA has long advised against connecting such devices directly to the internet, but rural areas are often more vulnerable due to their wide coverage.

Over the past few months, suspected Iranian hackers have repeatedly attacked US water and wastewater systems, with increasing intensity. States like Minnesota, Michigan, Arkansas, Georgia, and New Jersey have reported intrusions, leading to issues like reduced water pressure and flooding.