AI is making critical infrastructure easier to attack

AI is making it easier for hackers to target critical infrastructure systems such as water supplies and power plants, according to recent warnings from cybersecurity experts. A wave of cyberattacks targeting these vital systems has raised concerns about the readiness of U.S. water systems and a British power plant. Reports indicate that Iran-backed hackers breached a U.K. power plant, triggering a four-day shutdown, while simultaneous cyberattacks began on U.S. water systems.

U.S. officials have expressed alarm over hackers employing an AI-generated script to exploit devices commonly found in critical infrastructure, which has been instrumental in recent attacks on U.S. water systems. Security professionals argue that AI is lowering the barrier for hackers by reducing the time, cost, and expertise required to exploit known vulnerabilities in these systems.

However, despite efforts by governments to impose stronger security measures, significant challenges persist, including legal, political, and funding obstacles. The recent cyberattacks have caused limited disruptions so far, with some towns experiencing minor issues like altered water pressure and boil-water advisories. While the U.K. incident remains largely unknown, experts emphasize that AI has not fundamentally altered the cybersecurity landscape; rather, it has accelerated and expanded existing vulnerabilities.

Critics warn that existing cyber hygiene guidance and government advisories may not keep pace with the rapid advancements in AI-driven attacks, highlighting the ongoing struggle to safeguard critical infrastructure against increasingly sophisticated threats.