Why AI security experts are worried about cyberattacks

More than 100 technology companies have issued this warning, suggesting that governments should provide hospitals, utility companies, and local governments with advanced security tools that use artificial intelligence to spot and stop threats. Federal officials have already reported malicious attempts to target over 100 water and wastewater systems across the United States. These attacks often focus on the computers that monitor equipment, and authorities have observed that attackers are beginning to use artificial intelligence to help write the complex code needed to exploit those systems. While the industry letter identifies these risks, it does not include specific deadlines or commitments for how these defenses will be funded or built.

To understand why this is a concern, it helps to know how systems like water treatment plants actually operate. They rely on pieces of hardware called programmable logic controllers. Think of these as tiny, dedicated computers that act like a bridge between the physical world and the digital world. They constantly watch sensors to check water pressure or chemical levels, and they send commands to open valves or stop pumps. In the past, these were isolated systems. Today, many have been connected to the internet so that technicians can monitor them from anywhere. When these devices are reachable online, they become targets. Usually, a person would have to spend a long time manually studying the software to find a weak spot. Artificial intelligence changes this by acting as a high-speed assistant, scanning thousands of lines of code in seconds to spot vulnerabilities that a human might miss. It can then generate the specific, complex commands needed to trick a controller into shutting down a pump or changing a setting.

The warning from these companies highlights a shift in the digital arms race. Security has always been a battle of wits, but adding artificial intelligence to an attacker's toolkit means they can act with greater speed and scale. If an attacker can automate the process of finding and exploiting weaknesses, the number of successful attacks could increase significantly. This is why the tech companies are calling for a collective response; they argue that we can no longer rely on slow, manual defense methods. As our cities become increasingly digitized, the challenge lies in securing these critical systems without slowing down the technology that makes them useful in the first place.