US warns of active cyber threat targeting critical infrastructure

Key Points:

• Federal agencies including the NSA, FBI, DOE, EPA, and CISA issued a warning about an active cyber threat targeting Siemens S7 Series programmable logic controllers used in critical infrastructure such as water plants, factories, and energy facilities.
• Hackers are exploiting AI-generated tools to scan for exposed Siemens controllers, aiming to study systems and potentially disrupt operations, which could cause safety hazards, equipment damage, and widespread service interruptions.
• Siemens stated it has not detected increased attacks or new vulnerabilities in its industrial control systems and is coordinating with CISA to keep customers informed.
• The alert follows a surge in cyberattacks on local water systems, with some incidents suspected to be linked to Iranian-affiliated hackers, though no formal attribution has been made by federal officials.
• The warning highlights the unique risks of operational technology attacks, which can cause physical and economic damage beyond typical data breaches by disrupting utilities and industrial processes.