This advisory highlights an active cyber threat targeting Siemens S7 Series programmable logic controllers (PLCs). Threat actors are using AI-generated exploitation scripts to find and compromise these devices, often by scanning for internet-exposed or poorly protected systems. The attacks target critical infrastructure sectors like manufacturing, energy, and water. Exploitation can lead to disruptions, safety incidents, data compromise, and equipment damage. Key mitigations include inventorying all PLCs, applying security patches, and isolating devices from the internet. Strengthening access controls and monitoring for unauthorized activity are also crucial. Hardening PLC services and logic integrity helps prevent compromise. Hunt for anomalies that might indicate ongoing threats. This threat is not theoretical but an ongoing, active campaign. Owners and operators of operational technology systems must proactively check their defenses. Third-party access needs careful oversight. AI-assisted attacks lower the barrier for exploitation. Threat actors leverage open-source tools to mimic legitimate monitoring solutions. They gain read/write access to PLC data and configurations. Implementing defense-in-depth strategies is strongly recommended. Detection opportunities focus on anomalous S7comm behavior and reconnaissance indicators. Preventative actions include verifying network segmentation and strengthening access controls. Comprehensive logging and monitoring are essential for identifying malicious activity.