TLDR Tech / InfoSec
Can AI Create PLC Attacks? Yes, But It's Not That Easy Yet
Forescout investigated whether AI could generate PLC attacks by having an AI model port an RCE exploit (CVE-2021-31886) from a WAGO 750-852 PLC to a 750-831 PLC. The process required extensive human intervention, including correcting false leads, providing disassembly context, and executing Ghidra scripts generated by the AI. The final exploit stage took over 8 hours and incurred an API token cost of $535.74. A subsequent attempt to build a C2 implant resulted in bricking the PLC. However, once code execution was achieved, the AI rapidly produced functional ICMP and UDP payloads within minutes.
Read the full story