Industry Defence Insights

The energy world stands at a critical crossroads. Facing a projected 32% surge in global energy demand and a potential 75% increase in electricity needs by 2050, industry leaders are turning to artificial intelligence not as a futuristic concept, but as an immediate practical necessity.

Our deep dive reveals the remarkable conviction energy executives have in AI's potential – a stunning 91% believe it will significantly enhance energy security in the very near future. This isn't just talk; 85% are already implementing or piloting AI solutions across their operations. While only 12% currently consider AI absolutely critical to their operations, 81% expect it to become essential within just five years, signalling a profound and accelerating transformation.

We explore exactly where AI is making the biggest impact right now. Cybersecurity leads the charge with 57% of companies focusing their AI efforts on protecting increasingly digital infrastructure from sophisticated threats. Predictive maintenance follows closely at 52%, with AI algorithms analyzing equipment sensor data to forecast potential failures months in advance – dramatically reducing downtime and maintenance costs while enhancing reliability. Workforce augmentation through AI virtual assistants is another key focus area at 53%, helping bridge skills gaps as experienced workers retire and new technologies emerge.

Through concrete examples like AI-powered grid management, we demonstrate how these technologies are already reshaping energy systems. By constantly analyzing vast datasets including historical usage patterns, weather forecasts, and real-time sensor readings, AI systems generate remarkably accurate predictions of peak demand periods, enabling proactive rather than reactive management. The result? More stable power supply, lower operating costs, and better integration of renewable energy sources.

This transformation isn't happening in isolation – 94% of energy organizations are either already collaborating with AI solution providers or actively exploring such partnerships. By leveraging specialist expertise, energy companies can adopt cutting-edge capabilities without becoming AI experts themselves.

What does this mean for you? As energy systems grow increasingly intelligent, they'll not only become more efficient and reliable but may fundamentally change our relationship with energy itself. Subscribe to our podcast for more deep dives into the technologies shaping our future, and join the conversation about how AI is revolutionizing essential infrastructure.

Support the show

Ransomware attacks targeting industrial systems have surged a staggering 87% in 2024, with manufacturing bearing the brunt of these assaults. When cybercriminals strike critical infrastructure, the consequences go far beyond data theft—25% of these incidents caused complete operational shutdowns, with 75% resulting in significant disruptions to essential services.

We explore the rapidly evolving threat landscape where specialized attack groups have increased by 60%, now tracking 23 distinct threat actors like BIOS and Graphite who specifically target industrial control systems. The rise of "hybrid threats" combining hacktivism with ransomware illustrates how the motives behind these attacks are becoming increasingly complex.

The technological double-edge sword emerges clearly through our analysis. AI and machine learning offer unprecedented capabilities for predictive threat detection but are simultaneously weaponized by adversaries to create evasive malware like Frosty Goop. Similarly, cloud migration delivers operational benefits while expanding the attack surface—particularly concerning when 65% of OT sites maintain insecure remote access configurations. Legacy systems not designed with security in mind further compound these vulnerabilities.

Proven defensive strategies provide a path forward: network segmentation can cut ransomware recovery time by 50%, while zero trust models, proper vendor risk management, and strategic AI deployment for anomaly detection offer multi-layered protection. As Robert Lee from Dragos notes, "OT isn't niche anymore, it's a mainstream target," underscoring why security foundations must accompany technological advancement.

What societal risks emerge when our critical infrastructure becomes increasingly vulnerable, and what role can you play in raising security awareness? Join us in this essential conversation about protecting the systems that power our world.

Support the show

The alarming rise in cyber attacks targeting Europe's water and energy infrastructure demands our immediate attention. When malicious actors target these critical systems, the consequences extend far beyond data breaches – they threaten the essential services millions depend on daily.

Dive into the specialized world of operational technology (OT) and industrial control systems (ICS) cybersecurity as we explore the crucial role of red teams and blue teams. The red team functions as ethical hackers, simulating sophisticated attacks on the physical machinery controlling water treatment plants and power stations. Their counterparts, the blue team defenders, implement specialized security measures designed specifically for industrial protocols that operate very differently from standard IT networks. This dynamic partnership creates a powerful feedback loop of continuous improvement – the cornerstone of truly proactive cybersecurity.

Recent incidents in Europe highlight the growing sophistication of these threats. Finnish energy company Fordham faced not only increased cyber attacks but also suspicious physical surveillance near their facilities, suggesting potential state-sponsored activities tied to geopolitical tensions. Meanwhile, cybersecurity firm Dragos reports an 87% increase in ransomware attacks on industrial organizations in 2023, with a quarter of these incidents causing complete operational shutdowns. The threat landscape continues expanding, with vulnerability discoveries increasing by 27% year-over-year.

The stakes couldn't be higher. When these systems fail, it's not just inconvenient – it directly threatens public health and safety across entire regions. Organizations must move beyond reactive security approaches toward continuous testing, simulation, and improvement. As attacks grow more sophisticated, our defenses must evolve in tandem. The question isn't whether critical infrastructure will be targeted, but how prepared we'll be when it happens. Subscribe now to continue this vital conversation about protecting the systems we simply cannot live without.

Support the show

Critical infrastructure systems face increasingly sophisticated cyber attacks, with hackers using legitimate tools already present in targeted networks to avoid detection and establish persistence.

• "Living off the land" tactics make attacks nearly impossible to detect because hackers utilize legitimate system tools 
• The attack on American Water disrupted IT systems like customer billing while highlighting vulnerabilities in essential services
• Convergence of operational technology and information technology creates more entry points for attackers
• European infrastructure experiencing surge in cyber attacks since Russia-Ukraine conflict began
• Poland reported over 400,000 cyber incidents in first half of 2024, double the total for all of 2023
• "Hybrid attacks" combine traditional hacking with disinformation campaigns and communication disruption
• Geopolitical tensions fuel sophisticated attacks targeting critical infrastructure
• Global cooperation required to protect interconnected systems from evolving threats

Stay vigilant and stay safe.

Support the show

Ransomware attacks on industrial systems are not just financial threats—they're real-world dangers that could disrupt essential services. Ever wondered how the convergence of IT and OT systems has opened up new vulnerabilities for cybercriminals? We're unpacking notorious cases like the Colonial Pipeline attack to illustrate this high-stakes issue. Hackers have evolved, finding new ways to bypass traditional IT defenses, putting critical control systems in their crosshairs. Our discussion sheds light on the tactics employed by these cyber adversaries, from phishing to lateral movement, and stresses the precarious balance between maintaining operational continuity and implementing necessary cybersecurity measures.

As we hone in on solutions, we emphasize proactive strategies that industrial environments can adopt to thwart these threats. Think of network segmentation as closing the doors in your house to prevent a fire from spreading—it's a crucial step in reducing risks. We explore the power of AI tools for continuous monitoring, the importance of having resilient, air-gapped backups, and effective vendor risk management practices to fend off third-party vulnerabilities. Preparedness and a layered security approach are no longer optional; they're essential for safeguarding our critical infrastructure. Listen in to understand how to fortify your defenses and ensure operational resilience in the face of growing cyber threats.

Support the show

Unlock the secrets of the battery supply chain and discover how it's shaping the future of clean energy in today's episode. As investments in sustainable technology grow, we promise to arm you with the knowledge needed to navigate the complex landscape of battery production and its cybersecurity challenges. We'll explore the risks posed by global dependencies, particularly China's manufacturing dominance, and delve into the traditional cybersecurity threats like ransomware. Learn how cutting-edge technologies, such as blockchain and advanced encryption, can secure battery management systems and protect against these threats, while also addressing critical issues like forced labor through legal frameworks like the UFLPA.

But technology isn't the only answer. The episode underscores the importance of diversifying production across Southeast Asia, Europe, and North America to create resilient and ethical supply chains. We'll discuss how quantum computing, AI, and blockchain can revolutionize the industry, but emphasize the irreplaceable role of a strong cybersecurity culture and continuous vigilance. For investors, we'll offer a roadmap to making informed decisions by asking the right questions about ethical practices and security measures. Equip yourself with the insights to contribute to a sustainable future driven by clean, secure energy.

Support the show

Cybersecurity threats against operational technology systems threaten our critical infrastructure, from traffic lights to power grids. The importance of having a robust Incident Response Plan (IRP) cannot be overstated, as it allows organizations to respond effectively to incidents, mitigate damage, and ensure public safety, highlighting the need for societal awareness and action. 
• Operational Technology's role in daily life 
• Risks associated with interconnected systems 
• Importance and components of Incident Response Plans 
• Benefits of having a strong IRP during crises 
• Various testing methods for IRPs 
• The human element in cybersecurity training 
• Steps organizations can take to enhance OT security 
• Societal implications of OT security threats

Support the show

Today’s podcast delves deep into the urgent need for robust physical security within industrial control systems as IT and OT converge. Discussing critical concepts like the six-sided barrier, Physical Security Perimeter, and the intertwining of physical and digital security, we highlight vulnerabilities and considerations necessary for safeguarding essential infrastructures.

• Importance of integrating IT and OT security measures 
• Exploring the six-sided barrier concept for holistic security 
• Defining and securing Physical Security Perimeters (PSP) 
• Consequences of neglecting physical vulnerabilities 
• Integration of physical security with IT networks 
• Industry standards like IEC 62443 for comprehensive security 
• Continuous assessment required for addressing weaknesses 
• The interplay of environmental risks impacting sensitive equipment 
• Key takeaway: holistic approach is necessary for effective security

Support the show

Digital transformation brings both significant innovation and increased cyber risks. The episode discusses the balance between leveraging technology and ensuring robust cybersecurity measures, focusing on zero trust principles, the role of AI in both defending against and perpetrating attacks, and the evolving responsibilities of the CISO.

• Exploring the concept of digital transformation and its impact on cybersecurity 
• Understanding AI's dual role in enhancing and disrupting cybersecurity 
• Defining zero trust and its importance in securing networks today 
• Discussing the risks associated with IoT devices and connectivity 
• Highlighting the evolving role of the CISO in modern business strategies 
• Promoting a culture of security where everyone is responsible 
• Suggesting practical methods for fostering cybersecurity awareness 
• Concluding with a call to action to reflect on personal and organisational security measures

Support the show

Unlock the secrets of navigating the treacherous cybersecurity landscape of 2025 with us, where threats are no longer just a game of cat and mouse but a battleground of advanced technology and cunning schemes. Join our exploration of how ransomware attacks have skyrocketed by 81% and why they're no longer the simple nuisances they once were. Dive into the chilling world of AI-driven threats, where personalized phishing scams trick even the most cautious users, and autonomous attack systems evolve like digital predators. This episode sheds light on the grave reality of critical infrastructures becoming targets and the unsettling consequences when systems like hospitals and power grids fall into the wrong hands.

Discover the terrifying evolution of ransomware, as these attacks now target cloud backups, leaving victims vulnerable even after paying a ransom. We examine perilous supply chain vulnerabilities, where the breach of a single vendor can trigger catastrophic domino effects, reminiscent of the infamous SolarWinds attack. Learn about the eerie concept of session-based intrusions, where attackers become ghosts in the machine, hijacking legitimate user sessions to infiltrate systems. As cyber threats advance at breakneck speed, we ponder the critical question of how to keep up with these relentless digital adversaries.

Support the show