'Not a theoretical risk,' feds warn as attackers use AI-made code to hack critical infrastructure controllers

Five U.S. federal agencies warned of an active campaign where attackers leverage open-source snap7 libraries and AI-generated scripts to discover and exploit internet-exposed Siemens S7 PLCs across water, energy, manufacturing and other critical sectors; the intrusions can read/write PLC memory and ladder logic via S7comm, have disrupted multiple water systems, and the alert includes IOCs, detection guidance, and mitigation recommendations.