AI has 'potential' to turn script kiddies into sophisticated infrastructure attackers

AI's potential to turn script kiddies into sophisticated attackers targeting critical infrastructure, such as power grids and drinking-water systems, is evident, according to OT security experts. Steve Swick, former CISO at American Electric Power, notes that the knowledge required for such attacks is becoming less necessary. AI makes it easier and faster for attackers to target utilities and manufacturing plants, and perform reconnaissance on OT systems.

Paul Shaver, head of OT at Armadin, explains that attackers can quickly download automation controller manuals and identify exploitable features. Armadin, led by Kevin Mandia, uses AI agents to simulate real-world cyberattacks. Paul Shaver emphasizes that AI tools are improving, allowing access to information much quicker. Harry Thomas, CTO and co-founder of Frenos, states that AI lowers technical barriers for would-be OT hackers, advancing the timeline for attacks.

Frenos' report on AI in OT security reveals that AI models can help plan attacks on industrial systems, with successful planning attempts ranging from 6% to 47%. While AI accelerates tooling and knowledge transfer, it is still prone to errors and hallucinations. The report recommends a layered defense approach for OT defenders, including network segmentation, limiting remote access, and conducting recovery tests.