Artificial intelligence is creating new opportunities for industrial automation, but it is also introducing new cybersecurity challenges for PLC-based control systems.

Recent security research has demonstrated that AI can assist researchers in adapting remote-code-execution techniques between different programmable logic controllers. Although the process still required substantial human expertise and was not yet a simple automated attack, the research highlights an important development for industrial control system security.

PLCs are at the heart of many manufacturing facilities. They control motors, pumps, valves, conveyors, production machines, safety-related processes, and other industrial equipment. Because PLCs directly interact with physical processes, a successful cyberattack can potentially affect production availability, equipment operation, and plant safety.

Historically, many industrial automation systems were designed with isolation in mind. However, modern factories increasingly connect PLCs and other OT devices to industrial Ethernet networks, remote monitoring platforms, cloud services, engineering workstations, and enterprise IT systems. This connectivity creates significant benefits, but it also increases the potential attack surface.

The growing use of AI makes the situation more complicated. AI can help security teams analyze large amounts of industrial network information, identify unusual behavior, and support faster incident investigation. At the same time, attackers may eventually use AI to analyze vulnerabilities, understand industrial protocols, or accelerate parts of the attack process.

For automation engineers, cybersecurity can no longer be treated as a separate IT responsibility. PLC configuration, engineering workstations, industrial switches, remote-access systems, HMI platforms, and DCS infrastructure all form part of the overall operational technology environment.

A strong industrial cybersecurity strategy should begin with asset visibility. Manufacturers need to understand which PLCs, controllers, HMIs, remote terminals, drives, and network devices are connected to the production environment.

Network segmentation is another important measure. Critical PLC and DCS networks should not be unnecessarily exposed to public networks. Remote maintenance access should use controlled authentication and carefully managed permissions. Backup and recovery procedures are equally important because industrial systems must be recoverable after a cyber incident.

The development of AI-enabled attacks also reinforces the importance of keeping industrial automation equipment properly maintained. Firmware updates, vulnerability management, secure engineering practices, and controlled remote access can significantly reduce unnecessary exposure.

For companies operating legacy PLC and DCS systems, modernization does not always mean replacing the entire control system. In many cases, improving network architecture, monitoring, authentication, backup procedures, and segmentation can provide meaningful security improvements while allowing existing automation hardware to remain in service.

As industrial automation becomes increasingly digital, cybersecurity will become a fundamental part of PLC and DCS engineering. The future smart factory will need not only intelligent control and connected data, but also strong protection for the systems that keep physical production running.