Russian hackers have carried out a cyberattack on Ukraine’s biggest private energy conglomerate, DTEK Group.
Claroty co-founder Galina Antova said critical infrastructure assets were highly vulnerable to cyber-attack.
Related article: Russian spies launch cyberattack on Ukraine’s grid
“There is no doubt that cyber-attacks on critical infrastructure have become a key element of this conflict, with cyber and kinetic strikes potentially occurring alongside each other,” Antova said.
“The reality is that most critical infrastructure entities are highly exposed due to their reliance on legacy equipment with decades-long lifecycles, outdated security controls, and vulnerabilities that are difficult if not impossible to patch. And as these ageing industrial networks become increasingly connected to IT networks, the cloud, and other connected devices, this creates new forms of cyber risk.”
Antova said critical infrastructure was the “underbelly of national security”, and the private sector and the government must come together and take urgent, co-ordinated action to guard against hackers.
“We’ve known for years that Russian nation-state cyber-attackers are lurking in critical infrastructure networks, and the alleged attack on DTEK Group shows how whole sectors of the economy could be damaged if they were to succeed,” Antova said.
Related article: CS Energy attack highlights critical cybersecurity risk for energy sector
“It also shows how privately owned critical infrastructure has become a prime target for nation-state cyber-attacks, which means that business leaders in the private sector have a crucial role to play in national security. Given the economic pressure the US and other Western countries have exerted on Russia, it’s wise to be prepared for potential retaliation.
“While federal governments and cyber experts understand this, the huge gap we have in our cyber defences of the systems that are critical to our lives and livelihoods leads me to believe the danger is not widely understood by business leaders. It’s time to take urgent action.”
