Frenos warns advances in AI attack planning could increase cybersecurity risks for critical infrastructure, ICS systems

But frontier models are getting there fast.

Critical infrastructure operators should treat that as the time they have to prepare, not as a reason to wait.”

Frenos tested several AI models on three kinds of tasks: choosing one action, planning the steps to a goal, and working through a simulated scenario.

In the planning tests, models chose a series of actions that had to work together to reach a goal.

Frenos recommended that critical infrastructure defenders prioritize detection and response, use AI to assess their own environments and examine exposure across entire systems rather than individual vulnerabilities.