AI Assisted Hackers Target Siemens S7 Controls in US Water Systems
CISA, the FBI and NSA warn hackers are using AI scripts to exploit Siemens S7 controllers at U.S. water and wastewater systems, risking major disruption.
Summary
TechCrunch reported on August 20, 2026, that CISA, the FBI, the National Security Agency and other U.S. security agencies had warned Wednesday of hackers breaching all Siemens S7 programmable logic controllers. Used to automate energy, water, manufacturing and agricultural processes, vulnerable controllers could cause downtime, safety incidents or equipment damage. The activity is part of ongoing attacks against U.S. water supply and wastewater systems.
Hackers are using AI and public information to create exploit scripts, locate controllers running out of date software or protected by weak security, and understand their operation. An incident response professional working with critical infrastructure called the AI use noteworthy but said the devices were already highly vulnerable. CISA has long urged operators to disconnect controllers from the internet, while officials say rural communities face particular exposure because their systems cover large areas.
CISA said attacks have escalated since suspected Iranian hackers began targeting internet connected critical infrastructure in recent months. Officials have reported water facility intrusions in Minnesota, Michigan, Arkansas, Georgia and New Jersey.
Positives
- CISA, the FBI and the National Security Agency jointly alerted operators to attacks against all Siemens S7 programmable logic controllers.
- CISA has provided operators with a direct precaution by repeatedly advising them to disconnect critical infrastructure controllers from the internet.
- The agencies identified AI generated scripts, public exploit information, outdated software and weak security as central elements of the attacks.
Risks & concerns
- Compromised Siemens S7 controllers could trigger downtime, safety incidents or equipment damage across water, energy, manufacturing and agriculture.
- AI is helping hackers generate exploit scripts, find exposed controllers and learn how the industrial devices operate.
- Rural communities are particularly exposed because vulnerable water systems can serve large geographic areas.
- Suspected Iranian attacks against U.S. water and wastewater providers have escalated in recent months.
- Officials have reported water facility intrusions across Minnesota, Michigan, Arkansas, Georgia and New Jersey.