Forescout researchers use Claude to port pre-auth RCE from one WAGO PLC to another, then brick the test device

Forescout’s Vedere Labs used Anthropic’s Claude Code to port a working pre-authentication remote code execution exploit from a WAGO 750-852 programmable logic controller to a related WAGO 750-831, executing arbitrary ARM shellcode without credentials — then permanently damaged the test unit while trying to turn the foothold into a command-and-control implant.