Cyberattacks targeting critical infrastructure have surged globally in recent years, posing significant risks to national security and economic stability. Unlike other data breaches, these attacks primarily seek to access control systems for the purpose of disruption or espionage.
Energy, transportation, and telecommunications sectors have become primary targets. This is not surprising as these sectors — especially in developed countries — have become increasingly interconnected to digital technologies, which in turn have opened new vulnerabilities to cyberattacks. The consequences of these types of attacks are potentially devastating to nations, and so geopolitical adversaries have made it a powerful addition to their arsenal of digital weapons.
With this in mind, KnowBe4 released its latest report, Cyber Attacks On Infrastructure: The New Geopolitical Weapon. In the report, the security awareness training and simulated phishing platform provider examines the growing threat of cyberattacks on critical infrastructure and provides insight into safeguarding against these potentially devastating attacks.
Here are some key findings from the report:
- The number of vulnerable points in U.S. power grids is growing by approximately 60 per day, with the total count rising from 21,000 in 2022 to between 23,000 and 24,000 today
- Globally, the average number of weekly cyberattacks against utilities has quadrupled since 2020, with a doubling occurring in 2023 alone
- Between January 2023 and January 2024, critical infrastructure worldwide sustained over 420 million attacks – equivalent to 13 attacks per second – marking a 30% increase from 2022
According to KnowBe4’s 2024 Phishing by Industry Benchmarking Report, critical infrastructure sectors such as healthcare and pharmaceutical, education, and energy and utilities are in the high risk categories when it comes to employees falling victim to phishing tactics. This vulnerability is exploited by cybercriminals to infiltrate networks and systems.
“The findings in our report are a wake-up call for critical infrastructure sectors,” said Stu Sjouwerman, CEO at KnowBe4. “While the surge in cyberattacks on them is deeply concerning, it’s important to remember that we’re not powerless in this fight. By fostering a strong security culture that combines technology, processes, and people, we can significantly mitigate these risks. Every organization, regardless of size or sector, has a role to play in safeguarding our collective infrastructure. It’s time we view cybersecurity not as just an IT issue, but as a fundamental aspect of our operational resilience and national security.”
The Cyber Attacks On Infrastructure: The New Geopolitical Weapon report highlights recent high-profile attacks on global critical infrastructure, their far-reaching impacts, and provides actionable recommendations for organizations and institutions to enhance their cyber resilience. You can download a copy here.
