Establishing Strong Roots of Grid Security for the Sustainable Growth of AI
As we move into May, my garden in Austin Texas is at its best, the Japanese Maple is flourishing, and the roses and lantana are giving pops of color. The garden benefits from the mild temperatures and gentler spring conditions to allow plants to establish strong roots before the summer heat arrives.
I find myself wondering if there's an AI tool that would help me keep some of my more challenging plants alive before the weather machine turns to 'broil'. This takes me back to my day job, which includes working with energy grid operators to help build the strong roots of cyber security.
April has been an eventful month for the world's energy grids, let's look at some of the key developments.
In the U.S., the House Committee on Energy and Commerce heard from former Google CEO Eric Schmidt about the impact and reliance of AI on the energy grid. Schmidt told Congress 'Many people project demand for our industry will go from 3 percent to 9 percent of total generation, an additional 29 gigawatts by 2027 and 67 more gigawatts by 2030, this is at a scale I have never seen in my life in terms of energy planning.'
'If China comes to superintelligence first, it changes the dynamic of power globally, in ways that we have no way of understanding or predicting.'
AI's dependence on the energy grid is clear and if the US cannot keep up with power needs, other countries like China could gain a competitive edge. The energy requirements of data centers are predicted to skyrocket, especially with more advanced and power-hungry systems on the way. The energy grid is being stretched beyond its limits and AI could push up energy prices and create shortages. The energy grid is essential to powering the boom in AI and makes it a prime target for threat actors seeking to destabilize AI leadership or dependent critical systems.
In April we also saw massive blackouts across Spain, Portugal and parts of France that halted public transportation, banking cashpoints and internet connectivity, in one of Europe's biggest ever power system collapses. Spain, Europe's fourth-largest economy had no electricity, Red Eléctrica de España, the grid operator, is working to figure out what led to this worst-case scenario, a system completely devoid of energy. Whatever the cause, it is an admonitory tale of the importance of a resilient energy grid.
Although some have ruled out cyberattacks as the cause of the recent blackouts, attacks in the sector are growing. Energy systems are increasingly dependent on IT at every stage of the supply chain-generation, transmission, and distribution- all of which must be protected. The need to strengthen grid security has become more urgent since the invasion of Ukraine.
Over the course of a series of blogs we will explore how Keysight is helping grid operators and manufacturers rise to the challenge of improving power generation and cybersecurity while maintaining agility and regulatory compliance. We will discuss the latest trends and how operators can stay ahead of attackers. You will see coverage of IoT, OT and device security, cloud, and network security, as well as the importance of resilient time in the energy grid.
In today's blog we will focus on the increasing susceptibility of AI to the hidden threats in IoT/OT and devices in the energy sector.
AI's demand for electricity
The world's data centers are using ever more electricity, the International Energy Agency (IEA) estimates that global electricity usage by data centers will double in just four years, increasing from 460 terawatt hours of electricity in 2022 to 1,000 terawatt hours annually by 2026. This demand is roughly equivalent to the total electricity consumption of Japan. With governments around the world announcing multi-billion-dollar investments in AI, data center electricity consumption is expected to grow at a rapid pace as AI applications begin to penetrate the market.
Goldman Sachs Research estimates that data center power demand will grow by 160% by 2030. Currently, data centers globally consume 1-2% of overall power, but this percentage will likely double to 3-4% by the end of the decade. The overall increase in data center power consumption from AI is expected to be roughly 200TWh/year between 2023 and 2028, with AI representing about 19% of total datacenter power demand.
This heightens the dependence as well as the risk profile of the energy systems that support the AI datacenters and applications, making them targets for cyberattack.
It is also worth highlighting the additional dependency on water consumption. Data centers use fresh mains water, rather than surface water, so that the pipes, pumps, and heat exchangers used to cool racks of servers do not get clogged up with contaminants. Microsoft's global water use soared by 34% while it was developing its initial AI tools, and a data center cluster in Iowa used 6% of the district's water supply in one month during the training of OpenAI's GPT-4. Therefore, cyber-attacks impacting water supply to the datacenter operations may also be of concern.
The energy sector is a major target for cyberattack
The energy grid faces persistent threats from cyber criminals and hostile states such as Russia, China, Iran, and North Korea exploiting ransomware, AI, and advanced intrusion tools. State-linked cyber groups increasingly target industrial control systems pivotal to energy infrastructure. There are major areas of concern in the energy supply chain, where vulnerabilities exist in interconnected systems, for example GNSS and GPS for timing, and the targeting of subsea cables.
In 2021 the Colonial Pipeline Ransomware attack disabled its IT computer systems resulting in fuel shortages and panic buying in affected states. In 2022 a Russian attack on satellites knocked out communications and control of thousands of wind turbines in Ukraine. In 2023 the China-linked group, RedEcho, attacked India's power sector during border tension.
According to the E-ISAC, Electricity Information Sharing and Analysis Center, the nation state actors targeting the US energy sector in 2024 included Volt Typhoon, Salt Typhoon, Lemon Sandstorm/UNC757, APT 29 – Midnight Blizzard and GRU Unit 29155.
Last year Volt Typhoon, a China state-sponsored threat actor, targeted energy, transportation, and water sectors in the US and Canada. Its campaigns affected industrial sectors including Electricity Power Generation, Transmission and Distribution. Chinese hackers were active in Massachusetts' Littleton Electric Light & Water Departments (LELWD) for over 300 days without detection.
We have seen CyberArmyofRussia_Reborn (CARR) confirm attacks on US water and energy facilities. Hunt3r Kill3rs targeted internet exposed OT/ICS devices in the US, Europe, and Israel. And just in the last couple of days I saw a new headline about a cyberattack against a Canadian operator, Nova Scotia Power.
In addition to the IT-focused attacks such as Colonial Pipeline which have downstream impacts on industrial control systems (ICS), there has also been an increase in ICS-targeting malware intentionally designed for adverse effects on operational technology (OT) environments. FrostyGoop Malware is an ICS-specific malware tracked by Dragos. It interacts with ICS devices over Modbus TCP/502, a standard ICS protocol used worldwide. It is undetectable by common antivirus software and was used in Ukraine heating outages in 2024.
Legislation and proactive cyber security testing
Laws like the Network and Information Systems (NIS) Regulations and EO 13636 require enhanced resilience in critical sectors, including energy. The cyberattacks in the US and elsewhere are why regulators like Federal Energy Regulatory Commission (FERC) and North American Electric Reliability Corporation (NERC) are updating their requirements, to ensure power companies are preparing for the latest threats. FERC has begun to take steps to increase stricter cyber security controls for grid and power providers. FERC 887 and NERC CIP 003-9 are new regulations that impose stricter requirements on electric utilities for internal network security monitoring and remote access.
The costs of non-compliance can be significant. Back in 2019 NERC fined Duke Energy $10 million for cybersecurity failings relating to the CIP (critical infrastructure protection) compliance program.
How Keysight can help
With cyberattacks in the energy sector on the rise it is crucial to implement proactive security measures to safeguard your infrastructure and mitigate potential risks. It is important to validate new devices, networks, application workloads and traffic mixes. Our security testing solutions replicate your environment and support a wide range of protocols and applications with real-world test scenarios.
Keysight can help you to validate and refine your security posture, improving resilience to cyberattacks and ensuring adherence to cyber security requirements. To safeguard your infrastructure Keysight helps you in several ways including awareness and training, configuration management, incident response, risk assessment, security assessment, access control, identification, and authentication, as well as system and communications protection.
Let us explore further how Keysight can help you with device and IoT security.
Spotlight: Device and IoT security in the energy sector
As the energy sector becomes increasingly connected, communications networks will include both terrestrial and non-terrestrial networks which open up additional attack vectors. Back in 2022, Starlink terminals were hacked using voltage fault injection and side channel attacks to gain access to the Starlink network.
Keysight can conduct security assessments of devices connected to the energy grid, including validation of Smart Meters to the relevant Common Criteria Protection Profile. We analyze the hardware (debug and test interfaces and memories), software design, secure boot process, OS (Linux, Android, RTOS), as well as application security and perform targeted reviews to understand the security of your device. We can also analyze the security of the chipsets by considering logical, fault injection and side-channel threats, as well as the immutable firmware on the chips and the overall architecture.
Upgrades, especially of production OT devices, can be very expensive. Do you really want to take a substation down because you need to upgrade the firmware to fix a security flaw? This is why it is so important to do extensive pre-deployment testing of smart inverters, relays, phasors, and other operational devices so you can fix as many problems as possible early. It is also important to maintain an SBOM of deployed devices so that you can get immediate notification if a vulnerability is discovered in a library utilized in a device's firmware so that it can be remedied or mitigated before hackers can exploit it.
With a long history in the energy sector, Keysight is dedicated to safeguarding critical national energy systems. You can read more about how we keep energy grids safe on our Grid Modernization page.
Keysight is your partner for energy cyber security.
Visit 3BL Media to see more multimedia and stories from Keysight Technologies
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Forbes
an hour ago
- Forbes
Android 16 Could Finally Tame Bright HDR Videos
Tired of super-bright HDR videos and photos popping up in your social feeds? Google is working on a fix that could finally give you complete control over HDR brightness. An unreleased feature, spotted in the latest Android 16 Beta by the Telegram channel Mystic Leaks, will allow you to adjust the intensity of HDR content without having to turn it off entirely. HDR displays can deliver vastly improved visual quality, but they rely on significantly increased brightness to achieve the best results. This can cause HDR content to increase your display's brightness levels to an uncomfortable degree, especially in darker environments, such as when scrolling through social media in bed. The leaked screenshots show the new Enhanced HDR brightness controls option, located in Android's display settings, which includes a slider to adjust the intensity of the effect smoothly. This slider will adjust the color range, clarity, and, most importantly, the brightness of HDR images and videos on Android devices, without affecting the appearance of standard SDR content. HDR display is one of the biggest picture quality upgrades available on mobile devices. It can deliver more true-to-life photos and videos with superior color and contrast. However, to display HDR content to full effect, your device will often have to increase screen brightness significantly. This can be especially jarring if you've deliberately dimmed the display for use in a darkened room. HDR photos and videos often stand out quite dramatically when scrolling through social media, as the brightness suddenly increases, leaving some users wishing they could turn off the HDR effect. However, disabling HDR entirely would result in a significant loss of picture quality. Instagram recently added the option for iOS users to turn off HDR display. However, no such option currently exists for Android users. In the absence of system-wide Android support, some app developers have begun taking matters into their own hands. The Netflix app, for example, doesn't respect Android's brightness setting; instead, it provides its own independent brightness slider. Android 16's new Enhanced HDR brightness control will allow users to adjust the intensity of HDR content without sacrificing so much image quality. The 'best' quality will be achieved when HDR brightness is at a high enough level to deliver the full dynamic range of the displayed content, but it appears Google is finally acknowledging that such a high brightness level isn't always comfortable for all users and is finally giving us the option to dial down the intensity without having to turn off HDR completely. It's unclear from the provided screenshots exactly how the enhanced HDR brightness slider will work. However, it appears to allow you to adjust the maximum HDR brightness level without impacting SDR content. It remains to be seen how useful the slider will be in practice, especially if you are forced to delve into Android's settings to adjust it. I would like to see the slider exposed during media playback for easy adjustment while viewing content. It's also unclear whether moving the slider all the way to the left will disable HDR output entirely and, perhaps more importantly, whether all applications will support the feature. The Enhanced HDR Brightness control is tipped to appear in a future Android 16 beta and should deliver a more comfortable and enjoyable HDR viewing experience for any Android users who don't appreciate HDR's high brightness. Follow @paul_monckton on Instagram.
Yahoo
an hour ago
- Yahoo
GOP braces for first ‘test run' on codifying DOGE cuts
Congressional Republicans are gearing up for a major test of how easily they can lock in cuts sought by President Trump's Department of Government Efficiency (DOGE). Speaker Mike Johnson (R-La.) said he aims to have the House act swiftly on approving Trump's request for more than $9 billion in cuts to foreign aid and public broadcasting funding. That package is expected to hit the floor this week. 'We haven't done anything like this in a while, so this is probably, in some ways, a test run,' House Appropriations Chair Tom Cole (R-Okla.) told reporters. Trump last week sent Congress a request for $8.3 billion in cuts to the United States Agency for International Development (USAID) and foreign aid, and more than $1 billion in cuts to the Corporation for Public Broadcasting, which provides some funding to NPR and PBS. The request kick-starts a process that would allow Republicans to claw back funds for a list of programs on the administration's chopping block with just a simple majority in both chambers. That means Republicans wouldn't require Democratic votes in the Senate if they can stay mostly unified in greenlighting what's known as a rescissions package. But it's been decades since Congress has approved such a request to yank back funds previously greenlighted by lawmakers. Trump tried to use the same process to rescind funds in his first term but was unsuccessful, despite Republicans controlling the House, Senate and White House at the time. Republicans are bullish that this time will be different, however. '[Trump's] done this before, and they've got a great team, I think, in place,' Cole said. 'They've thought about these things a lot in the time in between his first and his second term.' 'They just seem to me to be much more sure-footed, and there's no question, the president has much more influence inside the Republican Party than he had during his first term,' Cole added. Still, some Republicans have expressed concerns about parts of the request. Senate Appropriations Committee Chair Susan Collins (R-Maine) voiced opposition last week to cutting the President's Emergency Plan for AIDS Relief (PEPFAR), saying Wednesday that the idea makes 'no sense' to her 'whatsoever.' 'Given the extraordinary record of PEPFAR in saving lives, it has literally saved millions of lives, and so I do not see a basis for cutting it,' she said. And not all Republicans are thrilled by the proposed cuts to public broadcasting in the plan, which calls for rescinding $535 million in both fiscal 2026 and 2027. 'You go to rural America, public television is how you get emergency broadcasting and all that kind of stuff,' Rep. Mike Simpson (R-Idaho), a spending cardinal, said Thursday. 'I look at Idaho Public Television, they're a great organization, and we don't see the politics that some states do in them, or at least they believe they see that and stuff.' However, Simpson said he still intends to support the overall package. 'I don't think in the long run, the rescissions are going to hurt them, because we're talking about the advanced appropriations and stuff like that.' 'What they're concerned about is, and should be, is the next year's appropriation process and stuff,' he continued. On its website, DOGE estimates that it's racked up $180 billion in savings as of June 3 through a combination of efforts like asset sales, contract cancellations and renegotiations, 'fraud and improper payment deletion, grant cancellations' and workforce reductions. And White House budget chief Russell Vought signaled further special requests to lock in more DOGE cuts could be on the way when pressed on the matter during a budget hearing last week, particularly as the administration's ongoing efforts to shrink the government have been tangled up in courts. But he also said it's 'very important' for this first package of cuts to pass, adding, 'If it does, it'll be worth the effort and we'll send up additional packages.' 'We are very anxious to see the reception from a vote standpoint in the House and the Senate,' Vought said, though he added, 'I'm less concerned about the House as I am in the Senate.' Some Republicans see the package introduced this week as potentially the easiest one to deal with, as many in the party have been critical of foreign aid and funds going to outlets like PBS and NPR, which they've accused of political bias. In a statement promoting the package on the social platform X, House Majority Leader Steve Scalise (R-La.) on Friday touted the president's request as cutting '$9.4 BILLION in wasteful spending' while holding 'bureaucrats accountable to the American people.' The package would target dollars for items like migration and refugee assistance that the administration says support activities that 'could be more fairly shared with non-U.S. Government donors,' USAID efforts they say have been used to 'fund radical gender and climate projects,' and development assistance they argued 'conflict with American values' and 'interfere with the sovereignty of other countries,' among other rescissions. Funding would also be eliminated for the United Nations Children's Fund, U.N. Development Program and the U.N. Population Fund under the proposal, as well as the World Health Organization and 'portions of the U.N. Regular Budget for the U.N. Human Rights Council and the U.N. Relief and Works Agency for Palestine Refugees in the Near East.' Democrats, meanwhile, have come out in strong opposition to the plan, accusing Trump of seeking political retribution and undermining foreign assistance efforts. They've also signaled trouble down the line when it comes time for both sides to negotiate a funding deal for fiscal 2026 — when Democratic support will likely be necessary to keep the government open in early fall. 'It's going to make it very difficult for us to do bipartisan bills if we believe that he's just going to send rescissions over for whatever they want or don't want in a bipartisan agreement,' Sen. Patty Murray (Wash.), top Democrat on the Senate Appropriations Committee, told The Hill this week. 'They need Democratic votes.' There's been some GOP frustration over the administration's handling of the annual funding work as well, as lawmakers on both sides have pressed the White House for more information about its budget plans in recent weeks. 'If we're getting to the point where we are right now, where we have a [funding stopgap], where we don't really have spend plans that are meaningful, now we have the administration transferring to the Congress their desires with rescission,' Sen. Lisa Murkowski (R-Alaska), a senior appropriator, said. 'I don't want to be a committee that no longer has a purpose. The role that we play is significant.' Copyright 2025 Nexstar Media, Inc. All rights reserved. This material may not be published, broadcast, rewritten, or redistributed.
Yahoo
an hour ago
- Yahoo
Protect LIGO's science and local impact from Trump's budget cuts
The Trump administration wants to slash funding for America's two Laser Interferometer Gravitational-wave Observatories (LIGOs) as part of broader cuts to the National Science Foundation. That would be a devastating blow to the nation's global leadership in scientific research. When Congress writes its fiscal 2026 budget, it should ignore the president's anti-science request. One of the LIGO sites is on the Hanford nuclear site. The other is in Louisiana. The White House proposes cutting 40% of their funding – $48 million to $29 million. And it also dictates how that cut should be made. It wants one of the two sites shut down. Given that Washington is a blue state that is participating in multiple lawsuits against the Trump administration and Louisiana is a red state that voted for the president, the odds of LIGO Hanford surviving seem low. Either way, scientists' ability to explore the universe by detecting gravitational waves would suffer significantly. Shutting one site down would compromise scientists' ability to verify detections of cosmic events and weed out false readings originating from local disturbances. It also would prevent the two sites from triangulating where an event occurred in the sky, allowing telescopes that rely on light for observations to also find and research them. The two LIGOs work in tandem. In 2015, the Hanford observatory and its sibling in Louisiana detected gravitational waves for the first time when they measured the ripple in space-time caused by two black holes merging 1.4 billion light-years away. The findings provided fresh confirmation of Albert Einstein's theory of general relativity and earned researchers a Nobel Prize in physics. Since then, LIGO has detected hundreds of events, including black holes merging and neutron stars colliding. The Hanford site continues to refine its tools and push science forward. An upgrade a couple of years ago installed quantum squeezing technology that allows scientists to detect 60% more events and probe a larger volume of space. If funded, the observatories will continue to help humanity answer profound questions about the universe. Projects like LIGO are expensive. The National Science Foundation has spent more than $1 billion on detecting gravitational waves over four decades. At the start, skeptics deemed it risky, but it has provided tremendous return on investment. It epitomizes the sort of Big Science research that few institutions other than governments can afford. Think Europe's Large Hadron Collider, the Manhattan Project and the international Human Genome Project. Undercutting LIGO as it reaches its full potential and produces its most impressive results just to save a few million dollars would be a colossal mistake. As one commenter on the Tri-City Herald's website put it, 'It would be like inventing the microscope, seeing a cell for the first time, and then discarding it.' The best is yet to come. Even if a future administration were to restore funding, rehiring skilled researchers would be a monumental hurdle. A temporary shutdown will delay scientific progress and result in America losing ground to international researchers. LIGO has a local impact, too, and not just that it is visible from outer space. Its presence helps the Tri-Cities and the Hanford nuclear site evolve their scientific narrative from Cold War-era nuclear development to 21st-century astrophysics. It is a symbol of progress, diversification and positive global contribution that is invaluable for regional identity and attracting future talent and investment. LIGO staff go the extra mile by working with local STEM (science, technology, engineering and mathematics) students. They speak in classrooms about science careers and explain the complex workings of the observatory in a way that young people can understand. An $8 million LIGO Exploration Center, which opened in 2022 and was funded by Washington state, further enhances that public-facing mission. Such direct engagement cultivates future STEM talent and inspires the next generation of scientists and engineers. The proposed cuts to LIGO would lead to an irreversible loss of U.S. leadership in gravitational wave astronomy and an immense loss to the Tri-Cities. The Trump administration must reconsider. If it does not, Washington's congressional delegation must convince their colleagues to preserve this cornerstone of American scientific preeminence.
