🔍 Read the full analysis: A New Urgency For Cybersecurity As AI Speeds Up Attacks on ThorstenMeyerAI.com
Get privacy and security gear delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
TL;DR
U.S. agencies say attackers have used AI-generated scripts against internet-reachable industrial controllers, and Microsoft reports an AI framework was used in activity targeting more than 2,250 tenants. Microsoft says most targeting attempts failed; AI-related findings by defenders and forecasts of a surge in vulnerabilities add to patching pressure. The reports point to faster, more persistent attack work, not an AI super-hacker.
A joint advisory published August 18 by the NSA, CISA, FBI, Department of Energy and Environmental Protection Agency says actors used AI-generated scripts against Siemens S7 programmable logic controllers, which operate industrial equipment such as pumps, valves and production lines. The agencies say the activity involved reconnaissance and capability development against controllers exposed to the internet, and assessed it as likely preparation to cause operational effects. The advisory says the scripts were disguised as monitoring tools and built using the open-source snap7 library.
Microsoft Threat Intelligence reported on October 21 that Storm-0940, which Microsoft describes as China-state aligned and active since 2021, used the ARTEX open-source agentic penetration-testing framework in activity linked by Microsoft to the ConnectWise Cloud Backup compromise. Microsoft says the actor used credentials from the cloud backup app to attempt access to more than 2,250 tenants. Between October 10 and 14, Microsoft logged more than 151,000 failed sign-ins in a password-spray campaign, with a peak of 2,900 failures per minute. In several attacks, Microsoft said, the time from initial targeting to privileged cloud access was under three hours.
Those figures do not mean every targeted tenant was breached. Microsoft said most targeting was unsuccessful and cautioned that an affected application or successful sign-in does not by itself establish that data was accessed. ConnectWise, which disclosed the compromise on October 16, said existing backup archives showed no indication of compromise. It suspended Cloud Backup, SaaS Security and Cloud Management while investigating.
Infographic 01 · The record so far
AI is in the attacker’s toolchain. On the record.
Six documented events in twelve weeks. Each label says what the source itself states about AI. Figures are the vendors’ and agencies’ own.
- 30 Jul 2026Unit 42: AI on attackDeepSeek inside the Hermes Agent framework picks and switches targets on its own. Limited impact: across autonomous and manual attempts, data theft from 3 NetScaler systems confirmed. Single-vendor report.
- 18 Aug 2026NSA, CISA, FBI, DOE, EPA: AI on attackAI-generated exploitation scripts, disguised as monitoring tools, against Siemens S7 PLCs in US critical infrastructure. “Not a theoretical risk.”
- 10–14 OctStorm-0940 password spray: AI on attack151,000+ failed logons across eight organizations. No successful sign-in. Lockouts made up nearly 98% of responses.
- 16–21 OctConnectWise Cloud Backup: AI on attackStolen app credentials, then machine-speed sign-ins to customer tenants. Microsoft attributes it to the China-state aligned Storm-0940.
- 21 Oct 2026OpenAI, Patch the Planet: AI on defenceAI found the critical PHP flaws before attackers did. OpenAI expects similar findings to “increase sharply in the coming months.”
- 21–22 OctQuest Diagnostics: no AI link reportedUnauthorized access to a lab ordering and results system; certain patient records accessed. No cause or attacker named.
Most AI-driven attempts in these reports failed. What changed is the cost of trying.Assessment: Thorsten Meyer
Sources: Unit 42 (30 Jul 2026); NSA, CISA, FBI, DOE, EPA advisory (18 Aug 2026); Microsoft Threat Intelligence (21 Oct 2026); ConnectWise Trust Center (from 16 Oct 2026); OpenAI, Patch the Planet (21 Oct 2026); Quest Diagnostics Form 8-K (22 Oct 2026).
Powered by Thorsten Meyer AI
Automation Compresses Attack Timelines
The reports matter because they describe AI as part of existing attack methods—such as reconnaissance, password spraying and adapting scripts—rather than evidence of an independently capable “super-hacker.” Software can repeat tasks at scale and operate for long periods, potentially reducing the time available for defenders to detect and contain an intrusion.
That pressure is especially serious where internet-facing industrial equipment or trusted third-party applications connect attackers to sensitive systems. In the Microsoft cases, some paths to privileged cloud access took less than three hours, according to the company. That does not establish that every attack will move at that speed, but it underscores why organizations need current inventories, prompt patching, strong authentication and practiced response plans.
The defensive picture is also changing. OpenAI said AI helped identify critical PHP vulnerabilities that were patched on October 21, before attackers exploited them, and forecast that AI-found critical vulnerabilities would increase sharply in coming months. That is a company forecast, not a measured future trend. If discoveries rise, defenders may face more urgent remediation work even as security tools improve.
hardware security key FIDO2 for Microsoft 365 account protection
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Two Reports, Different Attack Paths
The government advisory concerns operational technology: controllers used in manufacturing, energy, water, chemical, food and agriculture, and commercial facilities. The agencies recommend inventorying controllers, updating firmware, keeping PLCs off the public internet, separating information technology and operational technology networks, requiring multifactor authentication for remote access, and monitoring for unexpected S7 write activity.
Microsoft’s account concerns a trusted cloud application and attempts to use its credentials across customer tenants. Microsoft’s report describes ARTEX as a multi-agent framework capable of carrying out stages from reconnaissance toward data exfiltration with limited human interaction. The reported operation shows how trust in a connected service can become a route to customers’ cloud environments; it does not establish that customer data was taken.
AI’s use in security is not limited to attackers. OpenAI’s statement about PHP flaws describes AI-assisted vulnerability discovery on the defensive side. Separately, a security leader cited in the source material predicted a “vulnerability tsunami” within months and said organizations had roughly 18 months to prepare. That is an individual expert’s opinion, not a measured forecast or an established timeline.
““This is not a theoretical risk—it is an active threat.””
— The NSA, CISA, FBI, Department of Energy and EPA, in their August 18 joint advisory
business password manager with multi-factor authentication
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Breach Impact And Forecasts Remain Open
The public reports do not establish whether data was accessed in the ConnectWise-related activity. Microsoft says a successful sign-in or affected app does not necessarily mean data access occurred; ConnectWise said its existing backup archives showed no indication of compromise. The companies’ investigations and any further findings could clarify the impact.
The government advisory describes activity against exposed controllers and assesses that it likely represents preparation for operational effects. It does not confirm that the actors caused physical disruption. The source material also does not provide a complete accounting of affected organizations or confirmed consequences from the activity.
Predictions of a sharp increase in AI-found vulnerabilities or a near-term “vulnerability tsunami” remain forecasts. The reports do not quantify how much AI changed the success rate of attacks compared with non-AI methods, or show that AI alone caused the incidents. More detail on the scope and outcomes of the reported operations remains developing.
small business firewall with intrusion prevention
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Investigations And Basic Defenses
ConnectWise had suspended Cloud Backup, SaaS Security and Cloud Management while investigating; further statements from the company or Microsoft may clarify whether customer information was accessed. Organizations using affected services should follow vendor notices and their own incident-response procedures rather than treating targeting figures as proof of a breach.
For industrial operators, the agencies’ recommendations focus on reducing exposure: identify every controller, update firmware, block unnecessary internet access, separate OT from IT, apply multifactor authentication to remote access and review network activity for unexpected writes. For cloud users, companies should review third-party app permissions and credentials, strengthen sign-in protections and set clear patch deadlines.
For individual users, securing the email account is a practical starting point: use a unique password and phishing-resistant sign-in where available, and review recovery methods and connected applications. The next significant developments will be additional investigation findings, any confirmed impact on customers, and evidence showing whether AI-assisted discovery or attacks are changing outcomes over time.
industrial network security monitoring appliance for PLC networks
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Key Questions
What did U.S. agencies report about AI and industrial systems?
A joint advisory says actors used AI-generated scripts against internet-reachable Siemens S7 controllers. The agencies described reconnaissance and capability development and assessed the activity as likely preparation for operational effects; they did not report confirmed physical disruption in the supplied material.
Were more than 2,250 Microsoft 365 tenants breached?
No. Microsoft said credentials were used to attempt access to more than 2,250 tenants, but said most targeting was unsuccessful. It also cautioned that an affected app or successful sign-in does not by itself prove data was accessed.
What is ARTEX?
Microsoft describes ARTEX as an open-source, multi-agent penetration-testing framework that can carry out stages of an operation with limited human interaction. Microsoft said Storm-0940 used it in activity linked to the ConnectWise Cloud Backup compromise.
Are AI-assisted attacks certain to cause a surge in breaches?
The reports document specific AI-assisted activity, but do not establish that AI guarantees success or quantify a general rise in breach rates. Forecasts of more AI-found vulnerabilities or a “vulnerability tsunami” remain predictions.
What should organizations do now?
Prioritize basic controls: inventory systems, patch on set deadlines, keep industrial controllers off the public internet, separate OT and IT networks, use phishing-resistant sign-in where possible, review third-party app access and practice incident response.
Source: ThorstenMeyerAI.com
Halloween Picks
halloween
As an affiliate, we earn on qualifying purchases.
