The current geopolitical situation has created increased cybersecurity risks across all industrial sectors. This challenging environment also impacts the operational technology (OT) landscape, where we observe an intensification of threat activities.

On 2025-06-30, CISA, FBI, DC3 and NSA published a joint advisory about an increased threat level for critical infrastructure and industrial control systems [0].
On 2026-04-07, a new advisory was published, which now additionally flags Siemens S7 PLCs as potentially targeted [1].
Following this, on 2026-07-28, the existing advisory was updated to additionally flag the Siemens S7-1200 PLC as a specifically named target in the ongoing threat campaign [1].
On 2026-08-19, a new advisory was published specifically focusing on an potential active threat against the Siemens S7 series programmable logic controllers (PLCs) [10].

Given these developments, Siemens strongly recommends that customers review and implement the necessary measures to protect their infrastructure.
Siemens provides assistance via its Industrial Cybersecurity offerings [11]. To learn more, please contact your Siemens Sales representative.

• Keep the devices and systems updated to the latest version to limit the attack vectors that might exploit known vulnerabilities.

• Disconnect or remove any devices from networks with inadequate security level (internet, unmaintained internal networks, inadequate physically secured environments etc.) or install additional protection measures (e.g. firewalls).

• Use strong, unique passwords; do not use default password; use long enough and complex passwords.

• Follow the Siemens Operational Guidelines for Industrial Security [2]. Refer to device specific user documentation to stay informed and avoid potential misconfigurations [5][6][7][8][9].

Siemens will continue to monitor the situation and will share any relevant updates for our customers via the Siemens ProductCERT News Website [3].

Subscribe to our mailing list [4] to get notified on the latest updates on Siemens devices.

[0] CISA.GOV Fact sheet
[1] CISA.GOV AA26-097A
[2] Siemens Operational Guidelines
[3] Siemens ProductCERT News
[4] Siemens ProductCERT Mailing List
[5] Siemens S7-1200 G1 User Documentation
[6] Siemens S7-1200 G2 User Documentation
[7] Siemens S7-1500 User Documentation
[8] CPU 410 5H Firmware 10.3 (SIMATIC PCS neo)
[9] CPU 410 5H Firmware 8.3 (SIMATIC PCS 7)
[10] CISA.GOV AA26-231A
[11] Industrial Cybersecurity Offerings