Water Supply Poisoning Risk Via AI Cyberattack Is Real, Expert Warns

AI cybersecurity expert John Walsh has warned that hackers could use artificial intelligence to infiltrate water utility systems, potentially altering water treatment processes. Walsh, the field chief technology officer for government and critical infrastructure at IGEL, believes AI accelerates the process by which adversaries identify and exploit vulnerabilities in operational technology systems that control critical infrastructure.

This threat is exacerbated by geopolitical tensions, particularly the ongoing Iran war, and the accelerated development of AI capabilities. Water and wastewater systems, often run by local governments with limited resources and aging infrastructure, are a growing concern for cybersecurity experts due to the potential for widespread disruption.

Walsh noted that the disruption of water supply could have significant impacts, including the loss of public confidence and the inability to go without water for seven days, a scenario that could have serious implications for food production, healthcare, and other sectors. He cited the use of programmable logic controllers (PLCs) to automate functions in water treatment facilities, which could be manipulated by hackers without immediately alerting operators.

Walsh emphasized the need for a thorough investigation into the objectives of any cyberattack on water systems, distinguishing between attempts to disrupt services and those aimed at chemically poisoning the water supply. He also highlighted the role of AI in enhancing the threat, enabling attackers to rapidly identify vulnerabilities, evade traditional defenses, and modify malware.