AI-Driven Attacks Target Internet-Accessible Industrial Control Systems

• •Cyber threat actors are using AI to target internet-exposed industrial control systems.
• •Recent incidents include tampering with water pressure controls and oil and gas equipment.
• •Organizations are advised to secure their ICS and consult Cyber Centre guidance.

The Canadian Centre for Cyber Security has issued a warning about a global campaign targeting internet-exposed programmable logic controllers (PLCs) and other industrial control systems (ICS). Recent incidents include manipulation of water pressure controls at a municipal water facility and tampering with equipment at oil and gas companies. Threat actors are leveraging artificial intelligence to identify and exploit vulnerabilities in these systems, leading to degraded services and potential safety hazards. The most affected sectors include water, energy, and critical manufacturing. While Canada has not yet experienced a high-impact incident, the threat is assessed to be increasing, with future incidents likely to be more severe. Organizations are urged to enhance their cybersecurity measures and consult guidance from the Cyber Centre.