AI Adds New Dimension to Utility Cyber Threats, Experts Say

AI generated summary

Experts at a WECC webinar highlighted the dual role of artificial intelligence (AI) in the realm of cybersecurity for electric utilities. While AI aids employees in streamlining tasks, it also equips cybercriminals with tools to execute attacks more efficiently. Phil Tonkin from Dragos emphasized that sophisticated state actors, particularly from China, are attempting to infiltrate U.S. electricity networks for potential disruptive actions. Additionally, there are activists and criminals targeting utilities for ransomware attacks, with a specific group named Voltzite being tracked for its focus on electrical infrastructure.

Generative AI is lowering the barrier for threat actors, allowing them to exploit vulnerabilities without requiring advanced technical skills. This technology can also assist in crafting convincing phishing emails, making it easier for attackers to deceive employees. Despite the growing threats, Tonkin noted that the utility industry has been proactive in addressing cybersecurity challenges, benefiting from the ability to share information among non-competing entities. Continuous collaboration and utilization of available resources, such as intelligence reports from Dragos and CISA, are essential for staying ahead of cyber adversaries.