Energy infrastructure remains highly vulnerable to cyberattacks, primarily due to aging systems not designed for internet connectivity. The average age of a nuclear reactor in the US is approximately 44 years, and many operational technology systems lack the ability to receive frequent security patches.
Experts emphasize that the primary threat is not rogue AI, but human adversaries using generative AI to enhance their capabilities. These tools allow less-skilled attackers to exploit complex operational protocols by automating the identification and chaining of system vulnerabilities.
To mitigate these risks, utilities are exploring strategies such as manual operation backups and disconnecting critical systems from the internet. Cybersecurity professionals warn that introducing AI-driven defensive tools into sensitive operational environments may create additional instability.
OpenAI recently pledged $1 billion to subsidize training and access to AI models designed to assist in defending critical infrastructure. However, researchers argue that current policy safeguards for AI development remain insufficient compared to regulations governing nuclear or hazardous materials.
