AI-assisted exploit development used in active state-attributed attacks on U.S. water infrastructure

CISA confirmed that attackers used AI tools to develop exploit scripts for vulnerable Siemens PLCs during a campaign hitting 100+ U.S. water and wastewater systems in July 2026. U.S. intelligence assesses Iran is likely behind the opportunistic attacks. In this author's view, AI-assisted exploit development has crossed from research demo to active state campaign — a meaningful threshold.