Humans remain top cyber threat to energy infrastructure

The United States’ energy infrastructure has long been exposed to cyber threats, a vulnerability that has intensified alongside recent high‑profile hacks involving artificial intelligence. Joshua Corman, executive in residence for public safety and resilience at the Institute for Security and Technology, described the sector as “always prey,” noting that its defenses have been largely reactive to the evolving tactics of adversaries. Earlier last year, the Department of Homeland Security issued a warning that Iranian state‑aligned actors and sympathizers could launch cyberattacks against critical U.S. systems, underscoring the geopolitical dimension of the risk.

In the weeks following that warning, a series of incidents involving rogue AI tools have heightened concerns about the convergence of advanced technology and cyber‑warfare. Analysts cited the potential for AI‑driven attacks to automate reconnaissance, exploit vulnerabilities, and amplify the impact of malicious code on power grids, pipelines, and other essential services. While officials continue to strengthen detection and response capabilities, the growing sophistication of both nation‑state and non‑state actors suggests that the energy sector’s exposure to cyber threats will remain a pressing security challenge.