CSIS Assesses US Energy Infrastructure Uniquely Exposed to Iranian Cyber Threats as Conflict Escalates

CSIS analysis warned that US energy infrastructure faces escalating cyber risk from Iranian state actors, with 75% of transmission lines over 25 years old and roughly half of oil and gas pipelines exceeding 50 years. The US grid gains approximately 60 new vulnerable points per day through modernization. China, Russia, and Iran collectively account for two-thirds of attributed cyberattacks on energy systems. Iran has increasingly used UAS to attack critical assets, and PRC's Volt Typhoon campaign represents a persistent pre-positioned threat. CISA operates at 60% furlough during the DHS shutdown.