Humans, Not Rogue AI, Remain Biggest Cybersecurity Risk to Energy Systems

Cybersecurity for energy systems remains a significant concern, with human factors continuing to represent the primary risk to these critical infrastructures, rather than sophisticated artificial intelligence. While recent high-profile cyber incidents have raised alarms, experts emphasize that vulnerabilities have long existed and are escalating.

Joshua Corman, an executive in residence for public safety and resilience at the Institute for Security and Technology (IST), noted that energy systems have been susceptible to attacks for an extended period. "We were always prey. We were just kind of surviving at the appetite of our predators," Corman stated last year.

Corman's remarks were made in the context of a warning from the U.S. Department of Homeland Security regarding potential cyberattacks from Iranian actors and sympathizers. Although the role of AI in cyber threats has become a topic of discussion, actual attacks, whether human-initiated or human-exploited, continue to be a substantial threat.

The energy infrastructure is vital for societal function, and its susceptibility to cyber threats can result in widespread disruptions. Experts stress the importance of reinforcing security measures and enhancing personnel training to identify and counteract threats stemming from both human error and external attacks.