Energy Companies Need to Understand Their Cyber Attack Surface To Protect Against Cybersecurity Threats

 

Cyber threats targeting energy companies are on the rise, and the recent alleged attack on a Canadian natural gas company by Russian-based hacking group Zarya had many in the industry on edge. Although the group claims to have caused financial damage without loss of life, the potential for devastating outcomes in future attacks is a growing concern. What steps can energy companies take to fortify their defenses, understand their cyber attack surface and ensure the security of critical infrastructure and sensitive data?

In light of this alarming trend, it’s clear that energy companies must prioritize cybersecurity, investing in advanced technology and employee training to combat these threats. Cooperation between the private sector, government agencies, and security experts will be crucial for staying informed about potential risks and developing strategies to mitigate them. Regular software updates and stringent security protocols can also lessen the chances of a successful cyberattack. The pressing question remains: Are energy companies doing enough to protect themselves from cyber threats?

With a keen understanding of the multifaceted threats to the energy sector, Megan Samford, VP and Chief Product Security Officer of Energy Management at Schneider Electric, emphasizes the importance of comprehensively assessing one’s cyber attack surface and staying prepared for potential incidents.

 

Megan’s Thoughts:

“So when it comes to threats to the energy sector, we can really look at it from a few different angles. The first is aging infrastructure. The second is traditional natural disasters that happen every single day that the grid is used to dealing with and has been used to dealing with for over a hundred years now.

The next is the increased connectivity to the grid. We know that this means increased digitization and electrification, which is great. But increased connectivity also brings an increased attack surface. And finally, we see very targeted attacks to the energy sector as well as more opportunistic attacks like ransomware.

The targeted attacks are getting scarier; we see repeatable attack frameworks that are being used more like Swiss Army knives rather than one-in-done style malware that wasn’t able to be used across companies, across products or different sectors. And finally, what can be done about this?

The first thing is to understand your attack surface and the connections coming in and out of your network. Have an up-to-date asset inventory. On top of that, you want to have a defensible network architecture. You want to have anomaly detection so that you’re able to detect when the bad guys do get onto your network.

And finally, you want to have an incident response plan with the stakeholders that are in your supply chain that you can reach out to, to support you, as well as government contacts from CISA and the FBI that can be called upon.”

Article written by Azam Saghir.

Follow us on social media for the latest updates in B2B!

Image

Latest

Class 8 trucks
Driving the Future at ACT Expo: Windrose Showcases Its Purpose-Built Electric Class 8 Trucks
July 1, 2025

At the ACT Expo, Hammer Down host Mike Bush dives deeper into the future of freight with a hands-on look at Windrose Technology’s electric Class 8 trucks. Joined by Joseph Jaramillo, Driver Supervisor at Talon Logistics, Mike takes a test drive to experience the smooth ride, dual digital displays, and unique features—like advanced regen modes and a…

Read More
ball valve
Zero-Friction Flow: Trillium Launches the Red Point® Non-Contact Rising Stem Ball Valve to Cut Downtime, Boost Safety, and Perform in Demanding Applications
June 30, 2025

Join host Michelle Dawn Mooney for this special episode of FlowCast by Trillium Flow Technologies, as she sits down with Fred Jansen, General Manager of Trillium’s Netherlands facility, and Pepijn Esman, Engineering Manager for Red Point, to unveil the non-contact Rising Stem Ball Valve (RSBV)—a breakthrough engineered for extreme-service applications across oil &…

Read More
student success
The AI-Powered Edge in Education: How LearningClues Is Enabling Student Success with Co-founder and CEO Dr. Perry Samson
June 30, 2025

As AI continues to reshape education, institutions face a growing challenge in ensuring students succeed without compromising engagement or integrity. Today’s college students are often juggling jobs, family, and coursework, leading to limited study time and increased dropout risk. According to the National Center for Education Statistics, 40% of full-time undergraduates and 74% of…

Read More
AI Strategist
Why Enterprises Need an AI Strategist and Why It Should Be a Marketer
June 30, 2025

In this episode of The Marketing AI SparkCast, Aby Varma, founder of Spark Novus, a leading consultancy that partners with marketing leaders to adopt and scale AI responsibly and strategically, talks with Nicola Smith, Senior AI Programs Advisor at Southwest Airlines. They explore how enterprises can move beyond tool experimentation to embed AI into…

Read More