AI is making some infrastructure cyberattacks faster, officials say

In short: A recent wave of cyberattacks on water and energy organizations is raising alarms because AI can help some attackers work faster, but many break-ins still rely on old, familiar weaknesses.

What's going on

Cyberattacks have been hitting critical infrastructure, including U.S. water systems and energy-sector organizations. Critical infrastructure means services people rely on every day, like water, power, and transportation.

U.S. officials have warned that some attackers are using AI to generate “exploit scripts,” which are small programs that try to break into devices by taking advantage of known flaws. In this case, the warning focused on Siemens programmable logic controllers, or PLCs, which are industrial computers that help run equipment in places like water plants and factories.

Separately, reporting described a campaign tied to suspected Chinese operators that allegedly broke into Taiwanese government systems and energy companies using AI agents. AI agents are tools that can carry out steps on their own, a bit like a very fast assistant following a checklist.

Experts say AI can help attackers do early scouting, understand complex industrial systems, and search for existing weaknesses more quickly. That can reduce the time and specialized knowledge needed, but it does not create the security holes.

What to watch

Not every incident appears to involve AI. Some reported attacks on U.S. water utilities were linked to PLCs left exposed to the internet with weak or default passwords, and reporting said there was no evidence AI was used there.

The bigger issue is that many utilities run older equipment, cannot easily install updates without interrupting service, and connect operational systems to office IT networks. That mix can open doors for attackers whether or not they use AI.

Source: NYTimes