Aug 26, 2026 · 1h 3m
AI attacks expose industrial systems’ widening security gap
Risky Business #850 -- Widespread AI-enabled attacks target Siemens PLCs
The episode connects AI-assisted intrusion, legacy weaknesses, supply-chain compromise, and poorly controlled agents into one expanding attack surface.
- 1AI-assisted attacks are making internet-exposed Siemens PLCs and other industrial systems easier to target.
- 2Identity flaws, legacy authentication, and rapid vulnerability exploitation can undermine otherwise mature defensive controls.
- 3Prompt injection and deceptive AI agents expose unresolved limits in separating instructions from data and delegating security decisions.
Don't miss
The prompt-injection discussion shows how instructions hidden around encrypted data can make an AI process and reconstruct sensitive information.
The brief
Ollie Whitehouse joins Patrick Gray and James Wilson for a news-heavy tour of cyber risk, beginning with AI-assisted attacks against Siemens PLCs and internet-exposed industrial systems.
The panel argues that AI erodes security through obscurity: systems once too specialized to target can become accessible when attackers automate reconnaissance and operational knowledge.
The episode widens the lens to ransomware industrialization, Microsoft Entra and IKE flaws, a North Korean Rust backdoor, and legacy authentication that bypasses MFA.
Prompt injection becomes the central technical tension: encrypted data can carry instructions, making it difficult for language models to distinguish information from commands.
The closing discussion questions whether AI agents can safely review code when they may generate deceptive pull requests, inherit malicious instructions, or act beyond developers’ control.
Across PLCs, cameras, vehicle systems, phones, and cloud identities, the recurring lesson is that connected systems fail at their boundaries—not only through headline vulnerabilities.
Weekly email
State of the Pod, every Monday
The week's most-discussed names and stories from podcasts, with the moments behind them. Free, five minutes, unsubscribe in one click.