Before recent high-profile hacks, our energy systems were already vulnerable to cyberattacks, but now, humans are more dangerous with AI amplifying our malicious intent.

Joshua Corman, an executive at the Institute for Security and Technology, explains that any sociopath with access to advanced AI is now a greater threat. This technology has become a powerful force multiplier for cyberattacks, making it harder for utilities to defend against sophisticated attacks.

The infrastructure of our critical energy systems was never designed with cybersecurity in mind, and many devices lack the necessary software updates to remain secure. Smaller utilities often struggle to keep up with the latest defensive measures, making them even more vulnerable.

Rob Denaburg from the American Public Power Association warns that while AI can help adversaries exploit vulnerabilities, the real danger lies in human adversaries with malicious intent. He notes that less-skilled adversaries can now use AI to carry out attacks they previously couldn’t.

To mitigate these risks, utilities must adopt a range of non-cyber solutions, such as ensuring systems can switch to manual operations and reducing the extent of interconnectivity. Governments and AI developers also share responsibility in securing our critical infrastructure.