🔍 Read the full analysis: AI And Cybersecurity: Preparing For Attacks That Move Faster on ThorstenMeyerAI.com
Get business pricing on monitors, keyboards and dev gear
- Business-only prices and quantity discounts
- Tax-exempt purchasing
- Multiple users, one account, clear invoices
TL;DR
U.S. agencies say attackers used AI-generated scripts targeting Siemens industrial controllers, and Microsoft reported that a China-state-aligned actor used an AI agent framework in a supply-chain compromise. Microsoft said most targeting failed, but in several cases attackers reached privileged cloud access in under three hours. The reports document faster attack workflows, not a proven AI super-hacker, while forecasts of a coming vulnerability surge remain predictions.
U.S. agencies and Microsoft have reported AI-assisted cyber operations targeting industrial control systems and cloud tenants, including attacks in which a threat actor reached privileged cloud access in under three hours. The reports do not show that most attempts succeeded, but they document how automated tools can speed up familiar attack steps and increase pressure on organizations to secure exposed systems.
A joint advisory published August 18 by the NSA, CISA, FBI, Department of Energy and Environmental Protection Agency says actors used AI-generated scripts against internet-reachable Siemens S7 programmable logic controllers. The controllers operate equipment in sectors including manufacturing, energy and water. The agencies said the scripts were disguised as monitoring tools and built using the open-source snap7 library. They described the activity as an active threat and assessed that it may be preparation for operational effects against critical infrastructure.
Microsoft Threat Intelligence reported October 21 that Storm-0940, which Microsoft identifies as a China-state-aligned actor active since 2021, used the open-source ARTEX agent framework in activity linked to the ConnectWise Cloud Backup compromise. Microsoft said the actor attempted logins across more than 2,250 tenants using credentials for the cloud backup application. Between October 10 and 14, Microsoft logged more than 151,000 failed logons in a password-spraying campaign, peaking at 2,900 failures per minute; none of those attempts succeeded. In several attacks, Microsoft said, the interval from initial targeting to privileged cloud access was under three hours.
Microsoft cautioned that most of the targeting was unsuccessful and that an affected app or successful sign-in does not by itself establish that data was accessed. ConnectWise said its existing backup archives showed no indication of compromise and said it suspended Cloud Backup, SaaS Security and Cloud Management while investigating. Separately, OpenAI said AI had identified critical PHP vulnerabilities that were patched on October 21, and forecast that similar AI-found vulnerabilities would increase sharply in coming months. That is a forecast, not a measured count of future discoveries.
Infographic 01 · The record so far
AI is in the attacker’s toolchain. On the record.
Six documented events in twelve weeks. Each label says what the source itself states about AI. Figures are the vendors’ and agencies’ own.
- 30 Jul 2026Unit 42: AI on attackDeepSeek inside the Hermes Agent framework picks and switches targets on its own. Limited impact: across autonomous and manual attempts, data theft from 3 NetScaler systems confirmed. Single-vendor report.
- 18 Aug 2026NSA, CISA, FBI, DOE, EPA: AI on attackAI-generated exploitation scripts, disguised as monitoring tools, against Siemens S7 PLCs in US critical infrastructure. “Not a theoretical risk.”
- 10–14 OctStorm-0940 password spray: AI on attack151,000+ failed logons across eight organizations. No successful sign-in. Lockouts made up nearly 98% of responses.
- 16–21 OctConnectWise Cloud Backup: AI on attackStolen app credentials, then machine-speed sign-ins to customer tenants. Microsoft attributes it to the China-state aligned Storm-0940.
- 21 Oct 2026OpenAI, Patch the Planet: AI on defenceAI found the critical PHP flaws before attackers did. OpenAI expects similar findings to “increase sharply in the coming months.”
- 21–22 OctQuest Diagnostics: no AI link reportedUnauthorized access to a lab ordering and results system; certain patient records accessed. No cause or attacker named.
Most AI-driven attempts in these reports failed. What changed is the cost of trying.Assessment: Thorsten Meyer
Sources: Unit 42 (30 Jul 2026); NSA, CISA, FBI, DOE, EPA advisory (18 Aug 2026); Microsoft Threat Intelligence (21 Oct 2026); ConnectWise Trust Center (from 16 Oct 2026); OpenAI, Patch the Planet (21 Oct 2026); Quest Diagnostics Form 8-K (22 Oct 2026).
Powered by Thorsten Meyer AI
Faster Attacks, Tighter Response Windows
The reports matter because attackers can automate routine stages such as scanning, credential attempts and adapting scripts, reducing the time defenders have to detect and contain activity. Microsoft’s account of access in under three hours illustrates the possible pace in some incidents; it does not establish that all AI-assisted attacks move at that speed or succeed.
For organizations, the practical concern is less a wholly new kind of attack than more activity in less time. A trusted third-party application can provide a route into multiple customer environments, while internet-exposed operational technology can put physical processes at risk. Security teams may also face a faster flow of vulnerabilities to assess and patch if OpenAI’s forecast proves accurate. The reports do not quantify how broadly that effect will spread.
The agencies’ recommendations emphasize basic controls rather than buying AI-specific defenses: maintain an inventory of controllers, apply firmware updates, keep PLCs off the public internet, separate operational and corporate networks, and require multifactor authentication for remote OT access. Microsoft’s case also points to the need to review the permissions and access granted to third-party apps.
Popular right now
Sony WH-1000XM6 Wireless Noise-Canceling Headphones, Black
De'Longhi Stilosa Compact Manual Espresso Machine with Milk Frother
Dyson Purifier Cool PC2 De-NOx
As an affiliate, we earn on qualifying purchases.
Documented Cases, Not a New Attack Class
The government advisory concerns Siemens S7 PLCs, including models from the S7-200 through S7-1500 and safety controllers. The agencies said attackers found exposed devices through internet scanning services and used scripts built with snap7. They warned that targets included manufacturing, energy, water, chemical, food and agriculture, and commercial facilities. Their recommendations include monitoring S7 traffic for writes outside approved change windows and blocking TCP port 102 at the perimeter where appropriate.
The Microsoft report concerns a different route: a compromise involving ConnectWise Cloud Backup and credentials trusted by customers’ environments. ConnectWise disclosed the compromise on October 16, according to the source material; Microsoft published its account five days later. Microsoft attributed the activity to Storm-0940 and described ARTEX as a multi-agent penetration-testing framework capable of supporting stages from reconnaissance to data exfiltration with limited human interaction. Those descriptions and attributions are Microsoft’s assessments.
The common thread in these reports is automation applied to established techniques, not evidence that AI independently created a new class of attack. The source material also describes a separate Unit 42 report about an actor using a language model with an agent framework. The available account does not provide enough detail to establish the outcome of that case, so it cannot support stronger conclusions here.
“This is not a theoretical risk—it is an active threat.”
— The joint U.S. agency advisory
Successes and Future Risk Remain Unclear
The available reports do not establish how many targeted organizations suffered data access or operational disruption. Microsoft said most targeting failed and warned that a successful sign-in or affected application does not necessarily mean data was accessed. ConnectWise said its existing backup archives showed no indication of compromise; the supplied material does not provide further findings from its investigation.
The agencies assessed that activity against industrial controllers was likely preparation for operational effects, but the source material does not report that such effects occurred. It also does not quantify how many exposed controllers were affected. OpenAI’s expectation of a sharp increase in AI-discovered vulnerabilities remains a forecast, while a security leader’s prediction of a near-term “vulnerability tsunami” and an roughly 18-month period of pressure is an expert opinion, not a measured projection. The breadth and timing of any such increase are unknown.
Containment, Patching and Follow-up
ConnectWise had suspended Cloud Backup, SaaS Security and Cloud Management while investigating. Further details from the company and Microsoft could clarify the scope of the compromise, whether customer data was accessed and what remediation steps were completed.
Organizations using Siemens S7 equipment can follow the agencies’ guidance: check whether controllers are exposed to the internet, inventory devices and firmware, apply available updates, segment operational technology from IT, and strengthen remote access controls. The advisory also recommends monitoring controller traffic and using unidirectional gateways for data historian connections where appropriate.
For cloud customers, the immediate review is of third-party applications, their credentials and their granted permissions, alongside sign-in monitoring and incident-response plans. The reports do not announce a new regulatory deadline or a single technical fix. The next developments to watch are investigation findings, additional advisories, and whether the forecast rise in AI-identified vulnerabilities appears in documented patch data.
Key Questions
Did the reported AI-assisted attacks succeed?
Some activity reached privileged cloud access in several cases, Microsoft said, but most of the targeting was unsuccessful. Microsoft said a successful sign-in does not necessarily mean data was accessed. The agencies’ advisory reports activity against controllers but does not say that operational disruption occurred.
What systems did the U.S. advisory address?
The August 18 advisory addressed Siemens S7 programmable logic controllers, including devices used in industrial settings such as manufacturing, energy and water. The agencies said attackers used AI-generated scripts against controllers reachable from the internet.
What did Microsoft report about ARTEX?
Microsoft said Storm-0940 used the open-source ARTEX agent framework in activity linked to the ConnectWise Cloud Backup compromise. It reported attempts across more than 2,250 tenants and said some attacks reached privileged cloud access in under three hours. Microsoft also said most targeting was unsuccessful.
Is a surge in AI-found vulnerabilities confirmed?
No. OpenAI forecast that AI-found critical vulnerabilities would increase sharply in coming months, after reporting that AI identified critical PHP flaws patched October 21. The source material provides no measured future increase or timeframe beyond that forecast.
Source: ThorstenMeyerAI.com
