Critical energy infrastructure in the United States faces severe cybersecurity vulnerabilities, with some operators still relying on 1990s-era software while facing mounting budget cuts and workforce shortages, Vanity Fair reported.
Energy Operators Rely on Windows NT
A high-level executive at a major global energy supplier told Vanity Fair that aging infrastructure and staffing shortages leave the sector exposed to basic cyber threats. Small utilities frequently rely on outdated patches, while operators maintain systems running on Microsoft’s Windows NT operating system released in the 1990s. New infrastructure built to support expanding data center energy demands fares no better, as developers construct facilities rapidly without standardized security regulations, according to the energy executive.
Cybersecurity and Infrastructure Security Agency Funding Deficits
Federal defensive capabilities have simultaneously deteriorated. The Cybersecurity and Infrastructure Security Agency has lost nearly a third of its workforce and hundreds of millions of dollars in funding. State and local levels face similar strains, as a recent Deloitte survey of state chief information security officers revealed that budgets fail to keep pace with threats, having faced direct cuts in 16% of U.S. states.
Feels like March 1, 2020 for Cyber. Not normal, something is happening. Internet lockdowns in a couple of months?
For some reason, amidst increasing cyber-capabilities, our defenders are running out of money,
Soham Mehta, a research fellow at the Foundation for American Innovation, told Vanity Fair.
White House AI Task Force Intervention Plans
Federal authorities are beginning to address the vulnerabilities through newly formed administrative initiatives. The White House AI task force convened earlier this month to discuss critical infrastructure protection and cybersecurity measures. National security officials express optimism that frontier artificial intelligence models will improve defensive capabilities faster than attacker capabilities. In a survey of more than one hundred national security officials conducted last month, 81% indicated that defensive systems are very likely to improve with AI assistance.
Frequently Asked Questions
What specific operating systems are energy operators using?
According to reports from Vanity Fair, certain operators run critical infrastructure on Microsoft’s Windows NT, a 1990s operating system.
How much funding has the Cybersecurity and Infrastructure Security Agency lost?
The agency has lost hundreds of millions of dollars in funding alongside a reduction of nearly a third of its workforce.
What percentage of state chief information security officers reported budget cuts?
A Deloitte survey cited by Vanity Fair found that budgets faced direct cuts in 16% of U.S. states.
Related reading