Humans Remain the Biggest Cybersecurity Risk to Energy Systems, Not Rogue AI

A new report covered by The Verge finds that human error and insider threats — not autonomous AI systems going rogue — continue to represent the primary cybersecurity risk to energy and critical infrastructure systems. The analysis pushes back against AI threat narratives that center on autonomous AI attackers, while acknowledging that AI is increasingly being used as a tool to enhance human-executed attacks. For security engineers and AI practitioners working in or adjacent to critical infrastructure, the practical takeaway is that AI-assisted phishing, social engineering, and credential attacks deserve more defensive investment than autonomous AI agent threats in the near term. The findings align with a broader expert consensus that current AI capabilities amplify human attackers rather than replace them. Developers building AI tools that touch sensitive sectors should factor in this human-vector threat model when designing access controls and audit systems.