⚡ Weekly Recap: AI-Powered PLC Attacks, Git Lab Attacks, Stripe Key Leaks and More

Summary: U.S. government agencies warned that threat actors are using AI to write exploit scripts against internet-exposed Siemens S7 Series PLCs used in water, energy, and manufacturing, finding targets through legitimate scanning services such as Censys and ZoomEye. The agencies said actors are testing techniques against specific PLC models and using read access to map target environments ahead of possible write operations, and it is not currently known who is behind the activity.
What you should know: The warning states plainly that this is an active threat, not a theoretical one, and the path in is an internet-exposed PLC in a water, energy, or manufacturing environment - a single exposed service that can cascade into safety incidents and equipment damage.

Read the original at The Hacker News ↗

Topics: Threat Actors & Nation-State
Mentions: CVE-2026-12143 CVE-2026-14682 CVE-2026-15580 CVE-2026-15748 CVE-2026-15826 CVE-2026-18051 CVE-2026-18963 CVE-2026-19478 CVE-2026-19505 CVE-2026-19506 CVE-2026-19507 CVE-2026-19508 CVE-2026-19509 CVE-2026-20030 CVE-2026-20231 CVE-2026-20315 CVE-2026-20317 CVE-2026-20318 CVE-2026-20319 CVE-2026-20357 CVE-2026-20358 CVE-2026-20359 CVE-2026-24301 CVE-2026-25895 CVE-2026-32475 CVE-2026-40144 CVE-2026-40145 CVE-2026-41472 CVE-2026-41473 CVE-2026-47836 CVE-2026-47841 CVE-2026-57580 CVE-2026-59270 CVE-2026-63093 CVE-2026-63182 CVE-2026-64849 CVE-2026-65346 CVE-2026-65770 CVE-2026-65801 CVE-2026-65816 CVE-2026-65922 CVE-2026-66794 CVE-2026-6837 CVE-2026-69106 CVE-2026-69502 CVE-2026-69555 CVE-2026-69836 CVE-2026-73570 CVE-2026-74934 CVE-2026-74935 CVE-2026-74936 CVE-2026-74949 CVE-2026-75501 CVE-2026-75874 CVE-2026-76017 CVE-2026-76034 CVE-2026-76036 CVE-2026-76310 CVE-2026-76311 CVE-2026-76312 CVE-2026-76389 CVE-2026-76395 CVE-2026-76404
Related: Forminator Word Press Flaw Can Enable Unauthenticated RCE via Malicious PHP Uploads Cyber Risks ·
Attackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials and Secrets Cyber Risks ·
ZDI-26-846: MLflow Webhook Server-Side Request Forgery Vulnerability Cyber Risks · Oct 29, 2026