All articles tagged with #critical infrastructure
US officials suspect Iran-linked hackers exploited unsecured online automatic tank gauge (ATG) systems at gas stations to alter display readings without changing actual fuel levels; no physical damage has been reported, but the breach raises safety concerns about undetected leaks. Attribution remains uncertain, though Iran’s history of targeting energy infrastructure and ongoing regional tensions inform the investigation.
CISA unveiled the CI Fortify guidance urging water utilities, transportation and other critical infrastructure sectors to plan for geopolitical cyber outages by building isolation measures to protect OT and preparing recovery procedures, including system backups and manual operation, with targeted assessments and a renewed hiring push.
CISA, with Australia’s ASD and other partners, released guidance for organizations adopting agentic AI, detailing key security challenges and risks and providing actionable steps to design, deploy, and operate these systems while aligning AI risk management with established cybersecurity frameworks and strengthening oversight as adoption grows.
Anthropic’s Mythos AI, rolled out to a select group of firms, accelerates vulnerability detection and patching, raising alarms that rapid, cross‑sector coordination between governments and business is needed to defend critical infrastructure like hospitals, banks and utilities from new threats and potential autonomous attack agents while managing patch downtime.
AI’s rising ability to identify and chain software vulnerabilities could empower hackers, creating a potential ‘Vulnpocalypse’ scenario. Anthropic withheld Mythos Preview over risk of misuse, while governments and major firms weigh defenses as experts predict such capabilities could spread within six to twelve months, risking outages and attacks on finance, healthcare, and critical infrastructure—even as a Hollywood-style catastrophe remains unlikely.
Iranian-affiliated APTs disrupted PLCs across several US critical infrastructure sectors, exploiting internet-facing devices and legitimate vendor tools to access HMI/SCADA data, prompting a joint federal warning about escalating cyber risks amid ongoing tensions with Iran.
Cyber activity linked to the U.S.-Israel-Iran conflict shows Iran’s potential playbook: state-aligned groups hit U.S. targets like Stryker, Poland foiled an Iran-linked attack, and backdoors on U.S. networks hint at broader disruption of utilities and government systems, with AI-driven disinformation increasingly in the mix.
Pro-Iranian hackers are widening their targets from the Middle East into the United States amid the war, threatening critical infrastructure, defense contractors and healthcare networks; they claimed a major attack on Stryker and are targeting data centers, water plants, power stations and other facilities, with an emphasis on data destruction over financial gain. Experts warn that weaker links—like underfunded local utilities—could be hit first, and potential support from Russia or China could amplify campaigns. Security guidance urges up-to-date patches, credential hygiene and heightened vigilance as cyberattacks risk rising with the conflict.
Intel 471 notes a surge in hacktivist campaigns after US–Israel strikes on Iran, with pro-Iranian and pro-Russian groups claiming DDoS, defacements and data breaches against governments, military and critical sectors in the U.S., Israel and neighboring countries; Israel, Kuwait and Jordan were among the most affected regions, and national government, aerospace/defense, and technology were top-targeted industries. The activity is high in volume but often low in actual impact, and experts say cyber operations are now integrated with military strategy, underscoring resilience needs and infrastructure risk.
Poland’s grid outages in December were linked to Center 16, an FSB unit tied to Russia’s Sandworm, marking a rare destructive operation and a shift from espionage to sabotage as Moscow widens its cyber campaign beyond Ukraine into Europe; attackers used OT-focused methods and a wiper called Dynowiper to erase logs, signaling broader threats to critical infrastructure including energy, satellites, and undersea cables.
U.S. critical infrastructure operators are on high alert for potential Iran-backed cyber retaliation after weekend strikes, with Iran-aligned hackers and hacktivists escalating activity against the U.S., the Middle East, and Asia. Analysts warn of possible DDoS, data leaks, and intrusions targeting energy, water, transportation, and telecom sectors, though some officials say recent claims are not yet evidence-backed. The risk comes as DHS funding and staffing constraints may hinder monitoring and response.
EU will allocate 113 million euros from its long-term budget to Latvia, Lithuania, Estonia, and Poland to harden power grids against Russian attacks, financing physical barriers, anti-drone and cyber defenses, protective troops, and rapid repair teams. While the sum is modest and time-limited, officials say it signals EU commitment to energy security and will complement domestic spending as cross-border projects aim to reduce single points of failure across Europe.
A five-day blackout in Berlin caused by suspected sabotage by a far-left militant group highlights Germany's vulnerability to attacks on critical infrastructure, with widespread disruptions affecting hospitals, schools, and residents, prompting discussions on security measures.
The NSB reports a significant increase in Chinese cyberattacks on Taiwan's critical infrastructure in 2025, with attacks averaging 2.63 million daily attempts, especially targeting energy and emergency sectors, employing tactics like vulnerability exploitation, DDoS, social engineering, and supply chain attacks, involving major hacker groups and international cooperation to enhance cybersecurity defenses.
Advancements in AI are enabling hackers to launch faster, smarter, and more personalized cyberattacks, posing significant threats to critical infrastructure, financial services, and organizations worldwide. While malicious actors are leveraging AI for malicious purposes, cybersecurity professionals are also using AI to enhance defenses, automate threat detection, and respond more effectively, creating a high-stakes race between attackers and defenders.