Return to Threats

Experiment: Porting a PLC Exploit With AI Takes Hours and Hundreds of Dollars

securityweek.com 2026-09-01 AI agent abuse High

Executive Summary

Forescout researchers used Claude to port a remote code execution exploit between WAGO PLC models in hours for a few hundred dollars.

What Happened

Forescout researchers used Claude AI to port a remote code execution exploit between WAGO PLC models. The post Experiment: Porting a PLC Exploit With AI Takes Hours and Hundreds of Dollars appeared first on SecurityWeek .

Affected Products

  • WAGO PLCs
  • Anthropic Claude

Vulnerability / Attack Technique

AI-assisted exploit porting for industrial controllers

Technical Mechanism

An LLM adapted an existing PLC RCE exploit to a different model, cutting the time and cost of the work.

AI Security Category

AI-assisted attack

Part of the AI-Assisted Attacks topic.

Relevant Frameworks

MITRE ATLAS: Resource Development

RealGround Analysis

Adapting OT exploits used to need specialists. RealGround analysis: OT owners should assume exploits for one model will quickly be ported to related ones.

Recommended Controls

  • Patch PLC firmware across related models, not just the one named
  • Segment PLCs from IT networks

Related RealGround Service

AI Agent Business Logic Audit · or start with the free AI Agent Security Scanner.

Sources

securityweek.com: https://www.securityweek.com/experiment-porting-a-plc-exploit-with-ai-takes-hours-and-hundreds-of-dollars/

Summary and analysis written by RealGround from the source above; last updated 2026-10-17.

Talk to AI CISO