AI Is Lowering the Bar for Attacks on Critical Infrastructure, Experts Warn

Operational technology (OT) security experts say AI has not yet turned beginner hackers into sophisticated, nation-state level attackers capable of shutting down power grids or water systems. However, they warn that "the potential is there". The comments came from a media panel held ahead of the release of Frenos' State of AI in Security report.

Steve Swick, a former chief information security officer at American Electric Power, noted that utilities have long relied on security by obscurity, meaning attackers were assumed to lack the specialist knowledge needed. He said that knowledge is becoming less necessary. Paul Shaver, head of OT at Armadin, explained that AI helps human attackers perform reconnaissance quickly. It can sift through public documentation, such as manuals for automation controllers, to identify design features of a plant that were not secure by design. Shaver added that he can now build tools in days that once took months, and he expects people with basic skills to gain similar benefits as models improve.

Harry Thomas, chief technology officer and co-founder of Frenos, said that as AI lowers technical barriers for would-be OT attackers, it "advances the timeline". The experts were careful to avoid hype, but agreed that faster access to information is changing the risk picture for utilities and manufacturers. This summary is based on the opening of the article only.