Threats to Essential Services
In a speech marking the publication of the annual cyber report by the National Cyber Security Center (NCSC), Horne stated that AI could allow attackers to discover and exploit "vulnerabilities that have been tolerated for far too long" at a scale that was once unimaginable. While AI is expected to increase the scale and efficiency of hostile operations, the NCSC report noted that AI is more likely to be used to enhance and scale existing tactics and techniques rather than find brand new vulnerabilities.
Horne noted that technology underpins the automation of physical processes vital to modern life, including:
- Electricity switching
- Sluice gates in water facilities
- Dam operations
- Manufacturing lines
- Heating and refrigeration controls
Horne cited recent cyberattacks on refrigeration systems in French supermarkets as an example of how hostile actors could exploit civilian infrastructure. He noted that those systems were attacked because they used old technology that was no longer being updated and was connected directly to the internet with default passwords. He clarified that the incident was not an AI attack, but rather an exploitation of long-standing vulnerabilities.