Ampyx Cyber Blog
The Intersection of Resilience & Regulation
AI-Built Exploits Are Probing Siemens S7 PLCs
Joint advisory AA26-231A warns that threat actors are using artificial intelligence (AI) to build tools that probe Siemens S7 programmable logic controllers (PLCs) across U.S. critical infrastructure. This post walks through the techniques the agencies describe and the hardening steps they recommend.
Poland's Energy Sector Attack, Part Two: When the Path Into OT Is a Private Cellular Network
A second Polish combined heat and power plant was hit the same morning as the December 2025 attacks. CERT Polska's follow-up report describes something no one had seen in the wild, an attacker pivoting into an operational technology network across a shared private cellular network (a private APN). It explains how the chain worked, why the weak link sat on infrastructure the plant did not control, and what every operator relying on a private APN should check now.