Cybersecurity in Utilities: Recent Attacks Lead to Increased Security Efforts
- 1 day ago
- 3 min read
Effective cybersecurity is a top priority in the utility industry.
Our team at Sedna is committed to serving as a trusted technology partner to the public sector, and we are highly experienced in delivering innovative solutions to the utility industry. We support IT modernization and digital transformation for water, electric, and gas authorities, enhancing service reliability, cybersecurity, and operational efficiency for municipal utility providers. Reach out to our team to get started.
In this blog, we will be delving into the cybersecurity landscape for utilities. Protecting crucial systems for water utilities specifically not only minimizes operational disruption, but ensures the water that goes out to the public is safe to use.
Let’s explore some recent cyber attacks on the water industry that have led to increased security efforts across the nation.
A Dozen States Experience Utility Cyber Attacks
Recently, at least a dozen states have reported possible cyber attacks that have targeted water and wastewater utilities. Attackers have remotely accessed internet-facing PLCs and changed IP addresses and passwords, resulting in temporary loss of monitoring and/or control functions at several facilities.
A few incidents resulted in pressure loss and flooding, the former of which could lead to untreated groundwater seeping into pipes. Attacks like these can not only disrupt operations, but result in harmful situations beyond the facility.
There have been no widespread disruptions to water supplies or wastewater treatment, though the FBI is encouraging utilities to understand manual controls should automated systems become compromised. They have insisted that utilities should disconnect from the internet wherever possible in order to safeguard crucial systems.
Michigan was one of the states affected, and they have worked with the Department of Environment, Great Lakes, and Energy to spread the message to municipal water systems across the state and urge facilities that are using the affected software to secure their systems efficiently and follow applicable cybersecurity practices. There were no public health concerns to report in this instance.
Utilities in Other States Bolster Security Efforts
Our team equips utility clients with robust cybersecurity safeguards, utilizing a strong understanding of the technical and regulatory landscape of utilities to strengthen network infrastructure and prioritize data security.
Following these cyber attacks, several states are looking at bolstering their security efforts to ensure their systems are protected and operations remain undisrupted. Implementing a multilayered security architecture, segmenting systems, and ensuring regular system updates are crucial ways to safeguard against potential attacks.
In New Hampshire, the Department of Environmental Services is working with federal authorities and local stakeholders to safeguard water utilities. They are preparing to protect against potential attacks through actions including auditing existing security protocols and bolstering certain defenses such as firewalls. Following news of large amounts of attacks, it is essential for other utility facilities to ensure they have proper cybersecurity practices in place to protect their systems and operations.
The Role of AI in Utility Cybersecurity
AI is changing the game for cybersecurity across industries. For utilities, threat actors are leveraging AI’s capabilities to pinpoint vulnerabilities that they can exploit with more sophisticated attacks enhanced by AI. For organizations with outdated technology, AI still poses a threat as it can learn legacy code in a very short time span. It is important for the utility industry to understand the challenges posed by AI in the hands of cyber criminals and take the necessary action to defend against it, and AI can also prove to be that line of defense.
Utility agencies are utilizing AI as a part of their monitoring technologies in order to detect anomalies more efficiently, identifying potential threats before they can cause harm. It can also be used to detect those same vulnerabilities that attackers are looking for, so that they can be patched up and defended before they are compromised.
However, it is important to be aware that introducing technology like agentic AI can create further attack surfaces to exploit. In addition, these AI agents should be given limited access to systems that require strong safeguards. It is essential to maintain a human-in-the-loop strategy, even with autonomous forms of technology that can act on their own.
Effective cybersecurity in utilities is critical, especially as threat actors continue to build sophisticated attacks through the use of AI and other technologies. Implementing proper safeguards is necessary to ensure the best protection against these attacks and any that might occur in the future.
“Cybersecurity is like a game of poker: you always have to stay one step ahead.”
– Kevin Mandia, Cybersecurity Expert
Sources:
Comments