🔍 Read the full analysis: AI Has Taken The Clock Off Cyberattacks: What Companies And Users Can Do on ThorstenMeyerAI.com
Get movie nights delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
TL;DR
U.S. agencies say attackers used AI-generated scripts against internet-reachable industrial controllers, and Microsoft reports that an AI framework was used in a campaign targeting cloud tenants through a trusted backup app. Many attempts failed, and Microsoft says a successful sign-in does not by itself show that data was accessed. The reports point to faster attack activity, while companies and users can reduce risk with established security measures.
U.S. agencies and Microsoft have reported cyber operations using AI-assisted tools against industrial control systems and cloud services, including a campaign in which Microsoft says an actor reached privileged cloud access in some cases in under three hours. The reports document AI in attackers’ workflows, but also say many attempts failed and do not establish that every targeted organization suffered a data breach.
A joint advisory issued August 18 by the NSA, CISA, FBI, Department of Energy and Environmental Protection Agency says actors used AI-generated scripts against internet-reachable Siemens S7 programmable logic controllers, or PLCs. PLCs are industrial computers used to operate equipment and processes. The advisory says the actors used scripts disguised as monitoring tools and built with the open-source snap7 library. It describes the activity as an active threat and says it may be preparation for operational effects against U.S. critical infrastructure.
On October 21, Microsoft Threat Intelligence reported that Storm-0940, which Microsoft describes as a China-state-aligned actor active since 2021, used the open-source ARTEX agentic penetration-testing framework in activity tied to a compromise of ConnectWise Cloud Backup. ConnectWise disclosed the compromise on October 16. Microsoft says the actor used credentials for the cloud backup application to attempt logins to more than 2,250 tenants, relying on access customers had granted to the app.
Microsoft also recorded more than 151,000 failed logons in a password-spraying campaign from October 10 to 14, with a peak of 2,900 failures per minute. It says none of those attempts succeeded. In several attacks, the time from initial targeting to privileged cloud access was under three hours. Microsoft cautioned that most targeting was unsuccessful and that an affected app or successful sign-in does not by itself indicate that data was accessed. ConnectWise said existing backup archives showed no indication of compromise and that it suspended Cloud Backup, SaaS Security and Cloud Management while investigating.
Infographic 01 · The record so far
AI is in the attacker’s toolchain. On the record.
Six documented events in twelve weeks. Each label says what the source itself states about AI. Figures are the vendors’ and agencies’ own.
- 30 Jul 2026Unit 42: AI on attackDeepSeek inside the Hermes Agent framework picks and switches targets on its own. Limited impact: across autonomous and manual attempts, data theft from 3 NetScaler systems confirmed. Single-vendor report.
- 18 Aug 2026NSA, CISA, FBI, DOE, EPA: AI on attackAI-generated exploitation scripts, disguised as monitoring tools, against Siemens S7 PLCs in US critical infrastructure. “Not a theoretical risk.”
- 10–14 OctStorm-0940 password spray: AI on attack151,000+ failed logons across eight organizations. No successful sign-in. Lockouts made up nearly 98% of responses.
- 16–21 OctConnectWise Cloud Backup: AI on attackStolen app credentials, then machine-speed sign-ins to customer tenants. Microsoft attributes it to the China-state aligned Storm-0940.
- 21 Oct 2026OpenAI, Patch the Planet: AI on defenceAI found the critical PHP flaws before attackers did. OpenAI expects similar findings to “increase sharply in the coming months.”
- 21–22 OctQuest Diagnostics: no AI link reportedUnauthorized access to a lab ordering and results system; certain patient records accessed. No cause or attacker named.
Most AI-driven attempts in these reports failed. What changed is the cost of trying.Assessment: Thorsten Meyer
Sources: Unit 42 (30 Jul 2026); NSA, CISA, FBI, DOE, EPA advisory (18 Aug 2026); Microsoft Threat Intelligence (21 Oct 2026); ConnectWise Trust Center (from 16 Oct 2026); OpenAI, Patch the Planet (21 Oct 2026); Quest Diagnostics Form 8-K (22 Oct 2026).
Powered by Thorsten Meyer AI
Faster Attacks, Familiar Defenses
The reports suggest a practical change in the pace and cost of routine attack work, rather than evidence of an all-powerful or autonomous “AI hacker.” Scanning, testing credentials, adapting scripts and using trusted software are established techniques. AI and agent frameworks can help carry out or coordinate those steps more quickly and with less direct human attention, according to the reports.
That speed can narrow the time defenders have to spot misuse of legitimate access and respond. It also raises the workload for security teams: when software can run repeated attempts at machine pace, monitoring and response processes must be ready to act promptly. Yet the reported failures matter too. The Microsoft figures show extensive activity without successful logons in that campaign, and the company says most targeting in the broader activity was unsuccessful. The evidence supports vigilance, not the claim that every AI-assisted attempt works.
For industrial operators, an exposed controller can put physical processes at risk, not just business data. The agencies’ recommendations focus on reducing direct access to PLCs and separating operational technology from ordinary corporate networks. For cloud customers, the ConnectWise account highlights a different exposure: a trusted third-party application can become a route to multiple tenants if its credentials are misused.
hardware security key FIDO2 phishing resistant MFA
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Two Reports, Different Targets
The advisory on Siemens controllers covers activity against sectors including manufacturing, energy, water, chemicals, food and agriculture, and commercial facilities. The agencies say actors found exposed PLCs through internet-scanning services. Their prescribed steps include maintaining an inventory of controllers, updating firmware, preventing internet access to PLCs, blocking TCP port 102 at the perimeter and separating IT and operational technology networks. They also recommend multifactor authentication for remote OT access and monitoring for S7 write commands outside approved change windows.
Microsoft’s report concerns a cloud supply-chain pathway rather than direct attacks on industrial equipment. It says ARTEX can conduct stages from reconnaissance to data exfiltration with limited human interaction. The October campaign involved attempts to use credentials associated with a backup application across customer tenants. Microsoft’s timeline and figures describe the activity it observed; they do not prove that every attempted tenant was compromised.
A separate July 30 report from Palo Alto Networks’ Unit 42 describes a Chinese-speaking actor using the DeepSeek model with the Hermes Agent framework, directed through Telegram. Unit 42 said the agent performed extensive targeting work rapidly. These accounts add examples of AI-related activity, but they do not establish that all attackers use such tools or that AI alone caused any one breach.
“The majority of the targeting wasn’t successful.”
— Microsoft Threat Intelligence
business password manager with team sharing and MFA
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Breach Scope Still Unclear
The public information does not identify all affected organizations or establish that customer data was accessed through the ConnectWise activity. Microsoft explicitly warned that an affected application or successful sign-in alone is not proof of data access. ConnectWise said its existing archives showed no indication of compromise, but the source material does not provide a final investigation finding or a complete account of customer impact.
The agencies describe the PLC activity as likely preparation for operational effects; that is an assessment, not confirmation that attacks disrupted industrial operations. The reports also do not quantify how much AI contributed compared with conventional tools or human work. A forecast cited by the source that vulnerabilities could rise sharply is an expert opinion, not a measured projection or an established timeline.
small business network firewall with intrusion prevention
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Practical Steps and Investigations
Organizations should act on the controls cited in the reports rather than wait for certainty about future AI capabilities. Industrial operators can inventory PLCs, patch firmware, remove internet exposure, block TCP port 102 where appropriate, separate OT from IT, require multifactor authentication for remote access and monitor for unauthorized controller writes. Companies using cloud applications should review third-party access, credentials and tenant permissions, and maintain a rehearsed incident-response plan.
For individual users, the source recommends starting with the email account: use a unique, strong password, enable phishing-resistant multifactor authentication when available, and review account recovery methods and connected apps. Companies should set clear patch deadlines and test response procedures. Further updates depend on the ConnectWise investigation and any additional findings from the agencies or Microsoft about affected systems, access and data exposure.
industrial control system OT network monitoring appliance
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Key Questions
What did U.S. agencies report about AI and industrial systems?
The agencies said actors used AI-generated scripts against internet-reachable Siemens S7 programmable logic controllers. They described the activity as an active threat and recommended restricting access, patching controllers and monitoring OT networks.
Did the ConnectWise incident prove that customer data was stolen?
No. Microsoft said that an affected app or successful sign-in does not necessarily mean data was accessed. ConnectWise said existing backup archives showed no indication of compromise while it investigated.
How quickly did some attacks reach privileged cloud access?
Microsoft reported that in several attacks, the interval from initial targeting to privileged cloud access was under three hours. The report does not say that every attempt succeeded.
What should companies do now?
Follow established controls: inventory and patch systems, keep industrial controllers off the public internet, use multifactor authentication for remote access, review third-party app permissions, separate IT and OT networks, and practise incident response.
What can individual users do?
Start with email security: use a unique password, turn on phishing-resistant multifactor authentication when available, and review recovery options and connected applications.
Source: ThorstenMeyerAI.com
Halloween Picks
halloween
As an affiliate, we earn on qualifying purchases.
