{"id":7345,"date":"2026-09-20T15:43:28","date_gmt":"2026-09-20T15:43:28","guid":{"rendered":"https:\/\/silvybrand.com\/?p=7345"},"modified":"2026-09-20T15:43:28","modified_gmt":"2026-09-20T15:43:28","slug":"ai-cyberattack-energy-critical-infrastructure","status":"publish","type":"post","link":"https:\/\/silvybrand.com\/?p=7345","title":{"rendered":"Humans, not rogue AI, are still the biggest cybersecurity risk to energy systems"},"content":{"rendered":"


\n<\/p>\n

\n
\n

Before recent high-profile hacks raised the specter of AI possibly \u201ckilling all humans<\/a>,\u201d our energy systems were already disturbingly vulnerable to cyberattack \u2014 and the risk is growing.<\/p>\n<\/div>\n

\n

\u201cWe were always prey. We were just kind of surviving at the appetite of our predators,\u201d Joshua Corman, executive in residence for public safety and resilience at the Institute for Security and Technology (IST), told me last year<\/a>. At the time, I was preoccupied with a Department of Homeland Security warning<\/a> that Iranian actors and sympathizers could target the US<\/a> with cyberattacks.<\/p>\n<\/div>\n

\n

Last week, I called Corman up to chat about recent incidents of rogue AI agents orchestrating<\/a> their own complex cyberattacks<\/a>. Even AI executives<\/a> are talking about<\/a> whether the technology they\u2019re building could grow so out of control that it triggers an apocalypse. If there is now a 10 percent chance of artificial intelligence one day killing all humans, as some AI developers warn<\/a>, surely there\u2019s a chance it could knock our lights out in the meantime?<\/p>\n<\/div>\n

\n
\n

\u201cAny sociopath that wants to [attack] is now more powerful than they used to be.\u201d<\/p>\n<\/div>\n<\/div>\n

\n

But when I spoke to Corman and other cybersecurity experts, they were still more worried about generative AI in the hands of bad actors than they were about rogue agents. As tech companies race to build ever more powerful AI models, utilities will similarly have to shore up their defenses \u2014 no matter who or what initiated the attack.<\/p>\n<\/div>\n

\n

\u201cIt\u2019s literally any sociopath that wants to [attack] is now more powerful than they used to be,\u201d Corman tells me. \u201cThis has been a force multiplier and continues to grow.\u201d<\/p>\n<\/div>\n

\n

Much of our critical energy infrastructure \u2014 keeping the lights on in our homes, food cold in our refrigerators, and life-saving devices working in hospitals \u2014 was never designed to connect to the internet. The lifespan of a power plant is typically decades long. The average age of a nuclear reactor in the US is about 44 years<\/a>. They weren\u2019t constructed with today\u2019s cybersecurity risks in mind, making them easy targets for hackers.<\/p>\n<\/div>\n

\n

Eventually much of this infrastructure did connect to the internet. It\u2019s been difficult to fix any resulting cybersecurity vulnerabilities ever since. Some of the companies that originally designed the equipment still in use in the power sector have gone out of business, leaving no one behind to develop a software patch for those orphaned devices. Even when there is a patch available, applying it in a timely manner is another challenge. Unlike IT software upgrades, operational technology (OT) systems that control physical machinery for critical infrastructure might only be designed to apply updates once each quarter or year. Smaller utilities might also lack the resources, staffing, and know-how to use the latest defensive measures.<\/p>\n<\/div>\n

\n

\u201cThe true difference from AI is that it\u2019s letting adversaries move more quickly \u2014 but it\u2019s very challenging for those defending the infrastructure to match that pace,\u201d says Sophie McDowall, a research associate at the Foundation for Defense of Democracies\u2019 Center on Cyber and Technology Innovation.<\/p>\n<\/div>\n

\n

Intent is a key factor when assessing the risks posed by generative AI. When an OpenAI model managed to break out of the company\u2019s training parameters to attack AI lab Hugging Face<\/a>, \u201cSome of the sophistication and the capabilities and just what we saw in that were really eye-opening and in a sense terrifying in terms of how effective they were,\u201d says Rob Denaburg, cybersecurity program senior manager at the American Public Power Association, which represents community-owned utilities across 2,000 municipalities.<\/p>\n<\/div>\n

\n

But Denaburg points out that even in the Hugging Face hack and similar instances of AI agents breaking into systems they were never supposed to target, the rogue agents remained focused on fulfilling their training goals. If someone was to train a model to carry out an attack on energy infrastructure and agents broke out of the sandbox in that scenario, it would probably be a bigger concern for a utility. Again, that involves human adversaries with malicious intent.<\/p>\n<\/div>\n

\n

Historically, adversarial nation-states were largely considered the biggest cybersecurity threat to critical infrastructure. \u201cThey\u2019re going to be more disciplined,\u201d Corman says, and more capable of undertaking a sophisticated cyberattack. Now, AI is making it easier for less-skilled adversaries to launch an effective assault.<\/p>\n<\/div>\n

\n

\u201cA bad-actor human can use these tools to be better than they naturally would be to attack things they normally didn\u2019t know how to \u2026 because whereas they may not know OT protocols and OT networks and OT strategies, the LLM has read the manuals and does know what to do,\u201d Corman says.<\/p>\n<\/div>\n

\n

Utilities have to be more prepared, and defensive strategies are similar regardless of who the bad guy is. \u201cAI or not, it is at the end of the day, still a cyberattack,\u201d Denaburg says. \u201cEven though AI can help an adversary maybe chain vulnerabilities together and automate some of the process going from initial access to exploit \u2026 as long as you can stop them in one spot, they can\u2019t carry out that attack.\u201d<\/p>\n<\/div>\n

\n

Power companies can follow a range of best practices to safeguard critical infrastructure<\/a>. Some of them are non-cyber solutions, like ensuring systems can switch to manual operations when needed or in some cases pulling back on how interconnected this infrastructure is in the first place. Increasingly, \u201cin the face of the AI stuff, they\u2019re starting to realize if we can\u2019t protect it, disconnect it,\u201d Corman says.<\/p>\n<\/div>\n

\n
\n

\u201cThey\u2019re offering support for a problem that they are partially causing.\u201d<\/p>\n<\/div>\n<\/div>\n

\n

Governments and the companies developing advanced AI models hold responsibility, too, McDowall says. It was a positive step, she notes, that OpenAI CEO Sam Altman recently met with utilities<\/a> to discuss securing power grids. But there\u2019s a lot more they could do to prevent disaster, she says. \u201cThey\u2019re offering support for a problem that they are partially causing,\u201d while failing to adequately control their own technology advancements, McDowall tells The Verge<\/em>.<\/p>\n<\/div>\n

\n

And while there are regulatory guardrails for research and development when it comes to nuclear technologies and hazardous materials, there aren\u2019t yet the same policy safeguards for AI. \u201cThis is a technological scientific development that could cause potential risk to critical infrastructure systems, that can cause potential threat to human life. And so there does need to be restrictions,\u201d McDowall says.\u201cI recognize that we also don\u2019t want to limit development, but there\u2019s no reason that we can\u2019t drive research forward while also doing it responsibly.\u201d<\/p>\n<\/div>\n

\n

She points out that there\u2019s a dearth of research into how AI might be used to improve cybersecurity for energy systems \u2014 particularly beyond just red teaming to discover vulnerabilities.<\/p>\n<\/div>\n

\n

Earlier this month, OpenAI pledged $1 billion<\/a> toward subsidizing training and access to new models that are supposed to help defend critical infrastructure.<\/p>\n<\/div>\n

\n

\u201cIn the coming months, AI-enabled cyber attacks will become far more widespread and sophisticated as models around the world become increasingly capable,\u201d OpenAI said in the September 3 announcement. \u201cFrontier AI can help defenders move faster.\u201d<\/p>\n<\/div>\n

\n

But Corman cautions against relying on friendly AI agents to fight off the malicious ones. They could both be hard to control in the sensitive confines of an OT system for critical infrastructure.<\/p>\n<\/div>\n

\n

\u201cIt\u2019s also really dangerous to introduce too much change too fast in an OT environment,\u201d Corman says. \u201cNow we have an AI bull fighting another AI bull in an OT china shop.\u201d<\/p>\n<\/div>\n

Follow topics and authors<\/strong> from this story to see more like this in your personalized homepage feed and to receive email updates.<\/span><\/p>\n