AI‑Enabled Attacks: The Open Letter That Left Out Who’s Behind the Threat

The tech giants’ open letter correctly identified a looming “window” where AI could lower the cost of complex attacks, but it stopped short of naming the threat actors or detailing how to shut it shut. That omission matters because the real danger is already unfolding.

AI‑Powered Attacks in Action

On August 19, five U.S. federal agencies reported that adversaries were using AI‑generated exploitation scripts, masquerading as legitimate monitoring tools, to target exposed Siemens S7 PLCs that control water treatment plants, power stations and chemical facilities. The attack didn’t reveal a new vulnerability in the controllers; it simply leveraged AI to automate the discovery and exploitation of long‑standing misconfigurations.

Who’s Behind the Curtain?

While the letter warned of a surge in AI‑driven threats, it didn’t specify who was executing them. A parallel analysis by Britain’s RUSI think tank argued that criminals adapt to shifting revenue streams, not to new technologies. In other words, money drives the attack, AI just makes it easier to find and exploit the same old weaknesses.

Closing the Window: What the Industry Must Do

Regardless of who’s behind the attacks, the response is clear. Security teams should:

• Identify and remediate the highest‑risk misconfigurations, especially in industrial control systems.
• Implement stricter controls on code that is automatically generated or modified by AI.
• Deploy AI‑powered defensive tools that can detect anomalous exploitation patterns.
• Share threat intelligence across organizations to build a collective defense.
• Reevaluate supply chain security and vendor trust models to prevent malicious code injection.

Siemens itself acknowledged that the issue was not a new flaw but a new way of exploiting existing weaknesses. The takeaway is that AI changes the *who* can write an exploit, not the *what* can stop them. The industry must act now to patch, harden, and monitor before the window closes on its own.