AI-Generated Scripts Targeting Siemens S7 PLCs at US Water Plants: NSA, CISA, FBI, DOE, EPA Joint Advisory AA26-231A — Safety Alarms Disabled, 30+ Minnesota Water Systems Hit, “This Is Not a Theoretical Risk — It Is an Active Threat”
Five US agencies jointly confirmed August 19 that threat actors are using AI-generated Python scripts — built on open-source snap7 libraries, disguised as legitimate monitoring tools — to attack Siemens S7 PLCs managing US water treatment, energy, and manufacturing infrastructure. The first government advisory in history to explicitly confirm AI-generated code targeting OT systems. Minnesota: 30+ community water systems disrupted July 26-27, one city plant shut down, safety alarms disabled, allowing unsafe conditions to develop without alerting facility staff. At least 12 US states. Iranian nexus suspected. Take internet-exposed S7 PLCs offline now.
Read Full Brief →Threats & Attacks
NSA/CISA/FBI/DOE/EPA confirm AI-generated snap7 scripts attacking US PLCs disguised as monitoring tools. Minnesota: 30+ water systems hit, alarms disabled. “Not a theoretical risk.” Take internet-exposed PLCs offline now.
Agent reads state file → infected → writes next state → next agent infected. 63% success, payloads on GitHub. One paragraph in system prompt stops it. Add it now.
One unrevoked token → 20 days → 76 of 77 trivy-action tags poisoned. If you cleared yourself on LiteLLM packages — re-audit Trivy from March 19. CVE-2026-33634 KEV.
8 agents, 12 waves, Hermes + OpenClaw. 21 systems, 85 accounts, nuclear safety, 7 energy firms. The arc from Taiwan to US water plants took five days.
All prior models High. Astra Critical. Advisory AA26-231A confirms AI-generated exploits attacking US water and energy ICS. Both sides of the same capability arc.
TeamPCP → Trivy → LiteLLM → 40 min → 2,488 orgs. 95% exposed before packages via Trivy. FBI active. Rotate from March 19. Original Article #59.
Intelligence & Deep Dive
The DataWater Intelligence Brief
Weekly CISO-level threat analysis — breaking vulnerabilities, technical depth, zero noise.