Attack on critical infrastructure

The worry is not that an agentAI agentAn AI system that does more than answer: it takes a goal and acts on its own to reach it, step by step, using tools such as a browser, email or a terminal, without anyone approving each step.For exampleAsking an assistant to suggest flights is using a chatbot. Asking it to search, compare, buy the ticket and put it in your calendar, all by itself, is using an agent. switches off a country, but that it lowers the cost of attacking the operators nobody bothered attacking until now because it was not worth it. Murphy and Stone frame it as a change of economics: AI alters the cost of the marginal attack and exposes laggard organisations —legacy software, underfunded security, slow patching— to more attackers, more often ^[765]Uplifted Attackers, Human Defenders: The Cyber Offense-Defense Balance for Trailing-Edge OrganizationsMurphy, Benjamin; Stone, Twm · 2025 · preprintView source ↗Accessed on 9 September 2026. Carnegie identifies the same weak link —utilities, hospitals, municipalities and small operators, with fewer technical resources— and the mechanics of scale: one operator can deploy hundreds or thousands of agents at once ^[198]When AI Agents Attack: Autonomous Cyber Operations and Europe's Governance GapCsernatoni, Raluca; Pawlak, Patryk · 2026 · reportView source ↗Accessed on 9 September 2026.

Governments have already changed doctrine, though not because of AI. The planning premise of CI Fortify, published by CISA on 5 May 2026, is that operators should assume the adversary already has access to their OT network and must be able to operate isolated for weeks to months ^[866]CISA's CI Fortify Initiative Signals a Shift in How the U.S. Government Thinks About Grid ThreatsPOWER Magazine · 2026 · pressView source ↗Accessed on 9 September 2026; the driver cited for the shift is Volt Typhoon.

What this does not demonstrate. The only recent Iberian blackout had nothing to do with AI or with a cyberattack: the report by the National Security Council Committee concluded that no evidence of a cyberattack was found and attributed the zero-power event to multifactorial causes of voltage control and coordination ^[555]El informe del Gobierno sobre el apagón del 28 de abril recalca un origen multifactorial del 'cero energético' y descarta un ciberataqueInfobae España · 2025 · pressView source ↗Accessed on 9 September 2026, and the ENTSO-E panel arrived at the same family of causes ^[363]ENTSO-E Publishes Expert Panel Final Report on 28 April 2025 Blackout in Spain and PortugalENTSO-E Expert Panel · 2026 · official documentView source ↗Accessed on 9 September 2026. Its value here is the opposite of the one usually given to it: it shows that the cascade is physically possible without an adversary, and for that reason it sets a high bar for any directed scenario, which would have to explain how an attacker induces that set of simultaneous conditions. Carnegie is specific about what agents still do badly: long-horizon planning, state management and error recovery ^[198]When AI Agents Attack: Autonomous Cyber Operations and Europe's Governance GapCsernatoni, Raluca; Pawlak, Patryk · 2026 · reportView source ↗Accessed on 9 September 2026 —the three capabilities a deliberate cascade demands.