Cybersecurity Expert Warns of Escalating Hybrid Warfare and AI Threats
Professor Stefano Zanero highlights critical vulnerabilities in industrial infrastructure and the urgent need for state intervention.
1Escalating Hybrid Warfare Risks
Professor Stefano Zanero of Politecnico di Milano warns that Europe faces a surge in coordinated sabotage. These attacks target civilian services rather than military assets, aiming to create public panic. Recent incidents include tampering with supermarket refrigeration systems and triggering false bomb alarms that disrupt continental air traffic and security operations.
2The Impending AI Tsunami
While many current cyberattacks do not require advanced artificial intelligence, Zanero warns of an impending AI-driven escalation. New models will soon allow less skilled attackers to execute sophisticated offensive operations. This democratization of cyber-weaponry will lower costs for state actors, enabling them to intensify pressure on strategic targets across the continent.
3Industrial Control System Vulnerabilities
The primary targets are industrial control systems, which are often designed for longevity rather than cybersecurity. Many critical machines, such as hospital scanners, run on outdated software like Windows XP that cannot be patched. These systems are frequently installed by industrial experts rather than IT professionals, creating long-term, unfixable security gaps.
4Asymmetric Defense Challenges
Private companies are ill-equipped to defend against state-sponsored actors. While businesses can manage economic threats like ransomware, they cannot compete with the resources of a nation-state. Zanero argues that when services critical to citizens are at risk, the state must intervene to support private entities through national cybersecurity agencies.
5The Myth of Raising Shields
Zanero criticizes the reactive approach of raising defense levels only after an alarm is raised. In cybersecurity, effective protection requires proactive, constant prevention rather than last-minute measures. He emphasizes that if defenses are not already in place, the focus must shift to rapid incident response and recovery to minimize damage.
6Resilience Over Perfect Prevention
Since absolute prevention is impossible, building operational resilience is essential. The successful mitigation of attacks on blood bank refrigerators demonstrates the importance of constant monitoring and rapid detection. Organizations must prioritize robust backup systems and the ability to restore services quickly after a breach to ensure the continuity of operations.
7Supply Chain and Connectivity
The threat model is shifting toward large-scale attacks on suppliers rather than individual devices. By compromising a single provider, attackers can disable entire fleets of connected equipment. Zanero advises citizens to practice basic cyber hygiene and suggests disconnecting unnecessary smart features to reduce the potential attack surface of their devices.
8Psychological Impact of Sabotage
The recent wave of sabotage has successfully achieved its primary goal: creating material damage and sowing public disorder. By targeting everyday infrastructure, attackers confirm to the population that they are vulnerable. Zanero notes that even public discussion of these events inadvertently serves the attackers' objective of spreading fear and uncertainty.
Original article: Open — Cybersecurity Expert Warns of Escalating Hybrid Warfare and AI Threats