AI Weekly Malaysia

A joint NSA, CISA, FBI, DOE, and EPA advisory warns of an active, unattributed threat using AI-generated exploit scripts against Siemens S7 Series PLCs in U.S. critical infrastructure. The actors use internet scanning services (Censys, ZoomEye) to find poorly secured PLCs and deploy custom Python scripts built on open-source industrial automation libraries for initial access, credential access, and denial of service.

Why: This is one of the first government advisories explicitly confirming AI-assisted exploit script generation in the wild against OT/ICS systems. Builders working in Malaysian manufacturing, utilities, or any sector using Siemens S7-200/300/400/1200/1500 PLCs should verify their devices are not internet-exposed and check segmentation—Censys and ZoomEye are actively scanning for exactly that. For everyone else, it's a signal that AI-generated offensive tooling is now operational, not theoretical.

Siemens and Reinhausen are jointly developing a modular solid-state transformer (SST) that converts medium-voltage AC (up to 36 kV) directly into 800 VDC for high-density AI datacenter racks, reducing intermediate conversion stages. No commercial availability date was given. Nvidia separately plans its own 800 VDC power rack for the second half of 2026, citing that racks drawing 1 MW or more will require this shift.

Why: This is early-stage hardware development with no ship date, so no action is needed now. The practical signal is that 800 VDC is becoming the industry standard for next-gen AI rack power — relevant only if you are planning datacenter capacity or evaluating colocation for GPU-heavy workloads in the next 2-3 years. For most builders running on cloud, this is background context, not a decision point.