AI-generated exploits used in state-linked attacks on U.S. water systems

CISA confirmed attackers used AI tools to craft exploits for vulnerable Siemens PLCs — programmable controllers managing industrial equipment — during July 2026 attacks on 100+ U.S. water and wastewater systems. U.S. intelligence assesses Iran is likely responsible. In this author's view, AI-assisted exploit development has moved from research demo to active state campaign, a meaningful threshold.