Critical Infrastructure

U.S. agencies including the NSA, CISA, and FBI have warned about a heightened threat level. They report that threat actors are utilizing AI-generated scripts to specifically target Siemens controllers within critical infrastructure sectors like water plants.

A Russian attack in Kyiv killed at least 17 people as Ukraine intensified strikes on Wildberries warehouses. Both sides are escalating air attacks on critical infrastructure and logistics hubs.

A bridge collapse in Hombo village, eastern Democratic Republic of the Congo, on June 3 caused several people to fall into the river. The bridge is part of failing critical infrastructure in an area with a lucrative mine.

France requires government approval for non-European investors acquiring over 10% of shares in French companies operating in sensitive sectors and listed outside the EU. The measure aims to safeguard national security and strategic interests in defense, critical infrastructure, and key technologies.

GOP Rep. Mike Turner states that critical infrastructure should be hardened as investigators look into whether Iranian hackers targeted U.S. water systems.

The article advocates for using tax incentives and private capital to strengthen America's critical technology, maritime, infrastructure, and advanced manufacturing sectors, drawing parallels to the success of Opportunity Zones. It emphasizes investments in areas like autonomous systems, cybersecurity, energy resilience, and domestic supply chains to enhance national security and industrial competitiveness.

Lincoln Electric System is energizing a 3-MW /12-MWh zinc-based battery to support the Nebraska state Capitol complex and other critical infrastructure. The battery is part of a 30-MW microgrid initiative using non-lithium technology.

Iran accuses the US of striking critical infrastructure as the war intensifies. The conflict has escalated since US President Donald Trump declared the peace deal with Iran over 10 days ago.

Oil prices rose as Iran threatened retaliation against potential U.S. attacks on critical infrastructure, escalating tensions between the two nations.

A cyberattack on Nichirei Group, a Japanese frozen food logistics company, disrupted operations and forced KFC Japan to halt online orders and limit store operations. The attack, likely ransomware-related, caused system failures and unauthorized access to personal data, with services expected to resume by Friday.

Lithuania's president warns Russia may target critical infrastructure in the Baltic states or Poland with limited kinetic operations. Latvia's president adds Moscow could test NATO's Article 5 response mechanisms through hybrid provocations. Russia dismisses the claims as NATO militarization justifications.

Lithuania's president warns Russia may launch limited military or hybrid attacks on critical infrastructure in the Baltic states or Poland, with intelligence suggesting disruptions to energy and transport systems. Latvia's president and Poland's leaders echo concerns, while Russia dismisses the claims as NATO militarization pretexts.

Lithuania's president warns Russia may be planning targeted attacks on critical infrastructure, particularly energy and transport sites. The warning highlights concerns about kinetic operations that could disrupt systems linked to the European electricity grid.

The EU sanctioned nine Russians and four companies for cyberattacks on Europe, Ukraine, and critical infrastructure. The move, coordinated with the UK, targets Moscow's cyber network ahead of the next sanctions package.

Ukraine intercepted 5 ballistic missiles after Russia launched 145 aerial weapons, including 135 drones, causing damage to homes and critical infrastructure. President Zelensky urged the EU to expedite sanctions and enhance anti-ballistic defenses.

The European Union sanctioned nine Russian intelligence officers and four entities for a cyber espionage campaign targeting governments and critical infrastructure since 2010. The EU highlighted the FSB's 16th Centre and noted attacks in nine countries, including France, Sweden, and Poland, with France planning to summon Russia's ambassador.

Cybersecurity agencies from the United States and eight other countries have issued a joint warning that Russian state hackers are targeting vulnerable and poorly configured routers to infiltrate critical infrastructure networks.

Defense Minister Mykhailo Fedorov announced new air defense measures for Sumy region after Russia conducted over 12,000 attacks since the year's start, killing 122 civilians and injuring over 1,200. The decision aims to protect critical infrastructure and frontline communities from drone and guided bomb strikes.

Polish officials, including Prime Minister Donald Tusk, have confirmed preparations for potential Russian security provocations following US intelligence warnings. The intelligence highlights threats such as limited ground incursions from Russia or Belarus and drone strikes on critical infrastructure. Polish leadership emphasizes defense modernization while advising the public against panic.

The FCC is expanding its ban on Chinese telecom and surveillance gear to include older models, effective in early July. The prohibition covers equipment used in public safety, government facilities, and critical infrastructure.

Israeli cyber chief Yossi Karadi reported a significant increase in Iranian cyberattacks against Israel, rising from 1,600 incidents in June 2025 to 4,800 in June 2026. The attacks targeted critical infrastructure, central organizations, small to medium-sized companies, and public entities like law and accounting firms.

The UK's National Cyber Security Centre reported that 75% of cyberattacks on critical infrastructure are linked to hostile states. Richard Horne, NCSC head, stated 200 such incidents were handled in the year to May 2026, with Russia, China, and Iran identified as key perpetrators.

NCSC CEO Richard Horne warned that nation-state adversaries are prepositioning in Britain's critical infrastructure, with hostile states responsible for three-quarters of attacks. He emphasized that future kinetic targeting will rely on intelligence gathered today.

Ukraine has used drones to counter Russian forces, targeting critical infrastructure and military installations. The effectiveness of these drone operations has contributed to the growing importance of counter-drone technology.

The Pentagon's Cyber Defense Command is drafting a plan to defend critical infrastructure. The Department of Defense's Cyber Defense Command is working to develop a joint task force for this defense.

President Trump signed an executive order establishing a voluntary framework for AI companies to share frontier models with the federal government before release, aiming to promote secure innovation and strengthen cybersecurity for critical infrastructure. The order acknowledges the success of the US AI industry through limited regulation but highlights emerging security risks.

Anthropic has expanded its Claude Mythos AI model to critical infrastructure systems across 15 countries. The deployment focuses on integrating the technology into essential services and infrastructure operations.

Anthropic is expanding its security vulnerability program, Project Glasswing, and access to Mythos to 150 organizations across 15 countries. The initiative targets critical infrastructure in power, water, healthcare, and communications sectors, aiming to protect systems where a cyberattack could affect 100 million people.

Hybrid non-kinetic warfare, involving cyberattacks, sabotage, and disinformation, is increasingly used by threat actors to destabilize adversaries without direct military confrontation. Iran and Russia have targeted critical infrastructure in the US and Europe, while disinformation campaigns aim to divide societies and influence political outcomes.

The article argues that traditional deterrence strategies are ineffective against modern synthetic asymmetry, where non-state actors and cyber operations exploit technological convergence to cause disproportionate economic and societal disruption. It emphasizes the need for democracies to adopt 'synthetic resilience'—a capacity to absorb and adapt to multi-domain attacks—highlighting examples like the 2021 Colonial Pipeline ransomware attack, which caused billions in downstream economic losses.

GCHQ, the UK's spy agency, has warned that Russia is 'relentlessly targeting' critical infrastructure and democracy. The agency's head will outline specific threats and proposed countermeasures in an address on Wednesday.

GCHQ has stated that Russia is 'relentlessly targeting' critical infrastructure and democracy. The agency's head will outline threats to the UK and proposed measures to address them on Wednesday.

State cyber leaders are urging Congress for increased funding and support due to federal cutbacks in critical cyber grants and information sharing programs. These reductions have left states vulnerable to damaging cyber attacks targeting critical infrastructure.

Salt Typhoon's multi-year cyber campaigns against U.S. telecommunications networks reveal China's data-centric intelligence strategy focused on collecting and analyzing vast amounts of digital information at scale. This approach represents a shift from traditional espionage methods and poses a significant intelligence challenge to the United States. The article contrasts China's exhaustive data collection model with America's historical reliance on narrowly sourced, high-confidence intelligence.

AI hallucinations are introducing security risks into critical infrastructure by generating highly confident yet incorrect outputs, exploiting human trust and lacking mechanisms to recognize uncertainty. These inaccurate responses are based on patterns in training data. This creates real security risks.

The article argues that corporate networks have become the primary battleground of national security, with private companies now direct participants in conflict rather than peripheral actors. Modern adversaries employ 'Synthetic Asymmetry'—using inexpensive, networked technologies to achieve disproportionate impact against corporate infrastructure that nations depend on. The piece contends that most corporations remain underprepared for this reality, treating cybersecurity as a cost center rather than a national security imperative.

The CI Fortify initiative aims to help critical infrastructure organizations operate offline during cyberattacks by proactively disconnecting from third-party dependencies and finding alternative ways to function without reliable telecommunications and internet. This effort focuses on isolation and recovery. The goal is to ensure continuity of essential services.

Lawmakers and industry experts are debating whether data centers should be designated as a standalone critical infrastructure sector to enhance federal protection against cyber and physical threats. Recent attacks on Amazon data centers and growing reliance on cloud providers like AWS, Microsoft Azure, and Google Cloud have intensified the discussion, with the UK already recognizing data centers as critical infrastructure.

A bill in Colorado (SB26-090) attempting to weaken the state's 2024 right-to-repair law by creating exceptions for 'critical infrastructure' failed in a House committee vote. The law, which ensures access to repair tools and documentation for digital electronics, was supported by repair advocates who opposed the proposed carve-out. The bill, backed by companies like Cisco and IBM, passed the Senate but was defeated in a 7-to-4 vote in the House committee.

Critical infrastructure company Itron, which provides water and energy monitoring and utility meters to hundreds of millions of homes and businesses, has confirmed it was hacked. The breach impacts a major U.S. technology firm essential to utility services.