ics2 articles
AI Just Killed Security Through Obscurity. It Was Never That Healthy to Begin With.
AI has rendered "security through obscurity" completely obsolete, as both defenders and attackers now use AI agents to rapidly discover vulnerabilities in systems that were previously considered secure due to their complexity or obscurity — including decades-old protocols and critical industrial control systems. While this is accelerating the pace of vulnerability discovery to record levels, AI-generated patches remain unreliable, succeeding only around a quarter of the time, meaning defenders face a growing backlog with inadequate automated tools to address it. Security experts warn that organisations must move beyond simply finding and patching individual bugs, and instead focus on identifying systemic process failures to prevent vulnerabilities at scale.
AI-Powered Attacks on Critical Infrastructure Are No Longer a Thought Experiment
Autonomous AI-powered cyberattacks on critical infrastructure are now a reality, with suspected Chinese operators using AI agents in July to breach Taiwanese government systems and energy companies across 12 attack waves. Security experts and officials, including the FBI, warn that AI tools — particularly freely available commodity models — are lowering the barrier for adversaries to exploit decades of accumulated technical debt in critical systems like power grids, water utilities, and financial networks. Offensive AI capabilities are outpacing defensive ones, with experts cautioning that weaponized autonomous AI poses a clear and escalating danger to national security worldwide.