The modern world has constructed a civilisation that depends upon electricity for almost everything, from the refrigeration of food and the pumping of drinking water to communications, banking, transport, hospitals and industrial production. Yet the extraordinary complexity of this technological civilisation has created vulnerabilities that previous generations could scarcely have imagined. One of the most serious emerging threats is the possibility of artificial intelligence being used to launch sophisticated cyberattacks against electricity grids, potentially producing prolonged blackouts and widespread economic disruption. Australia is by no means immune to this danger. Indeed, its dependence upon interconnected electricity infrastructure, digital control systems and increasingly complex energy networks makes the issue one of national security.
Michael Snyder, writing in his November 2, 2026 article, "Time To Get Prepared? AI Cyberattacks Could Literally Turn Off Our Electricity And Cause An Extended Blackout At Any Moment," raises the disturbing possibility that cybercriminals or hostile states could use artificial intelligence to attack the industrial control systems upon which electricity generation and distribution depend. Snyder discusses attacks on programmable logic controllers, the electronic devices that control machinery in power stations, water facilities, factories and other essential infrastructure. These are not merely computers storing information. They are connected to physical processes, meaning that a successful intrusion can potentially interfere with equipment, interrupt production or create dangerous operating conditions.
A conventional cyberattack might steal personal information, encrypt files or compromise a bank account. An attack against operational technology can potentially stop water pumps, disable industrial equipment or interfere with electricity supplies. The consequences move from the virtual world into the physical world, where the damage can affect entire communities.
Artificial intelligence changes the scale of this threat. Previously, sophisticated cyberattacks against industrial infrastructure required substantial technical knowledge, specialist personnel and considerable preparation. AI systems can now assist attackers in identifying weaknesses, examining computer code, producing malicious software and automating elements of an intrusion. They can also make phishing campaigns more convincing, allowing criminals to obtain passwords and other credentials that provide access to supposedly secure networks. AI does not make every attack successful, but it can reduce the cost and difficulty of attempting large numbers of attacks.
This is not simply the speculation of technological pessimists. In July 2026, the Australian Cyber Security Centre published guidance specifically addressing AI-enabled attacks against government, critical infrastructure and large enterprises. The agency warned that AI could enable malicious actors to discover vulnerabilities and develop exploits within hours, potentially allowing attacks to progress rapidly from initial compromise to disruption or extortion. The recommended defensive measures included stronger network separation, better software maintenance, restrictions on account privileges and improved monitoring.
More disturbing still was the Australian Signals Directorate's Annual Cyber Threat Report 2025–26, released in October. During that financial year, the Australian Cyber Security Centre responded to more than 1,500 cybersecurity incidents, an increase of 20 per cent on the previous year. It also issued more than 4,400 notifications concerning potentially malicious cyber activity. Critical infrastructure accounted for 154 incidents, with electricity, gas, water and waste services among the affected sectors. These figures do not mean that 154 electricity grids were attacked or disabled, but they demonstrate that essential infrastructure is already an established target.
The Australian Signals Directorate has also warned that state-sponsored actors seek access to critical infrastructure networks not merely to steal information, but potentially to position themselves for future disruption during an international crisis. Such access could become particularly valuable in a military confrontation. A hostile power might attempt to interfere with an adversary's electricity supplies without firing a missile or deploying conventional forces. In a society dependent upon digital infrastructure, the distinction between cyberwarfare and conventional warfare becomes increasingly blurred.
Snyder points to international incidents illustrating the danger. In July 2026, a small electricity generation facility in Britain was reportedly shut down for four days following an attack linked to Iranian-associated hackers. British authorities emphasised that the incident did not threaten the wider national electricity system. Nevertheless, it demonstrated that cyber intrusions can produce genuine physical disruption. An attempted attack on Polish energy infrastructure in December 2025, attributed by cybersecurity researchers to the Russian-linked Sandworm group, provides another warning. That attempt was reportedly thwarted before it caused a major blackout.
These incidents should not be exaggerated into claims that national electricity systems have already collapsed. Their significance is that hostile actors are actively targeting the technological systems upon which essential services depend. A successful attack against a small facility is not equivalent to bringing down an entire national grid, but it illustrates one pathway through which more serious disruption might occur.
Australia has particular reasons for concern. Its National Electricity Market links electricity generation and distribution across Queensland, New South Wales, the Australian Capital Territory, Victoria, South Australia and Tasmania. Western Australia and the Northern Territory operate separate electricity systems. This means that a single cyberattack would not automatically plunge the entire continent into darkness. Nevertheless, disruption affecting major generators, transmission networks or control systems could have serious regional consequences.
Australia's electricity infrastructure is also undergoing a major technological transformation. Traditional large power stations are increasingly supplemented or replaced by distributed renewable energy systems, batteries, electronically controlled inverters and sophisticated communications networks. These technologies offer genuine benefits, but they also introduce new software, suppliers and potential points of vulnerability. Solar panels themselves are not inherently a cybersecurity threat. The concern arises when internet-connected inverters, remote monitoring systems or other control equipment can be compromised.
The Australian Energy Market Operator has recognised the growing importance of cybersecurity. The Australian Energy Sector Cyber Security Framework, administered through AEMO, is intended to help electricity and gas organisations assess their security arrangements and strengthen their resilience. Yet the existence of a framework does not eliminate the underlying vulnerabilities. Cybersecurity is a continuous contest between defenders and attackers, and the rapid development of AI makes that contest increasingly demanding.
There is a further irony. Artificial intelligence is creating two distinct pressures upon electricity systems. First, it gives malicious actors more powerful tools with which to attack infrastructure. Second, the expansion of AI data centres is increasing electricity demand and introducing new challenges for grid management. Large concentrations of computing equipment require substantial power supplies, while sudden changes in their electricity consumption can complicate network stability. Thus, AI is simultaneously increasing dependence upon electricity and potentially increasing the sophistication of attacks against it.
What would a serious electricity disruption mean for ordinary Australians? Initially, the consequences might appear manageable. Lights would go out, computers would shut down, and households would rely upon battery-powered devices. But the difficulties would multiply as an outage continued. Mobile telephone towers have limited backup power. Internet services depend upon functioning communications infrastructure. Electronic payments could become unavailable. Petrol stations might be unable to operate their pumps. Supermarkets would struggle to preserve refrigerated and frozen food. Water supply and sewage systems could encounter difficulties where backup arrangements were inadequate.
Hospitals generally possess emergency power systems, but generators depend upon fuel supplies, maintenance and operational continuity. A prolonged regional blackout would place pressure upon emergency services, transport networks and the supply chains that deliver food, medicines and essential equipment. The economic consequences could be substantial even if electricity were restored within days.
The prospect becomes particularly serious when several systems fail together. Modern infrastructure is interconnected not merely electrically but economically and digitally. A communications failure can interfere with the coordination of repairs. Fuel shortages can affect backup generators. Banking interruptions can obstruct commerce. Transport disruptions can delay deliveries. A cyberattack that initially affects one infrastructure sector may therefore produce secondary consequences across several others.
There is, however, an important distinction between a credible danger and an inevitable catastrophe. Electricity systems have protective equipment, operating procedures, network separation and emergency restoration plans. Not every industrial controller is accessible from the internet, and compromising one device does not automatically provide control over an entire grid. AI-assisted attacks are a serious and growing threat, but claims that a nationwide blackout could occur at any moment should be understood as warnings about possibilities rather than reliable predictions.
Nevertheless, prudence does not require certainty. Australians have traditionally understood the importance of preparing for bushfires, floods, droughts and other natural disasters. Cyberattacks against essential infrastructure should now be added to that list. Households can maintain reserves of drinking water, non-perishable food, necessary medications, torches, batteries, first-aid supplies and some cash. Battery-powered radios provide a means of receiving information when internet connections are unavailable. Those who rely upon electrically powered medical equipment need more specialised contingency arrangements.
For rural Australians, practical preparedness has additional importance. Farms frequently possess equipment, water storage and space that can provide some resilience, but they may also depend upon electricity for water pumps, refrigeration, communications and other essential operations. Solar panels with appropriately configured battery storage can provide backup electricity, although ordinary grid-connected solar systems generally shut down during a blackout unless designed for independent operation. Generators can also be useful, provided they are maintained, fuel is stored safely and the equipment is operated outdoors to prevent carbon monoxide poisoning.
Preparedness is not an argument for panic or extravagant survivalist expenditure. It is an argument for recovering a measure of independence from systems that are becoming increasingly centralised and technologically complicated. A household capable of managing several days without mains electricity is less vulnerable than one that assumes uninterrupted services are guaranteed.
At the political level, Australia should reconsider the wisdom of making every essential service dependent upon extensive digital connectivity. There are legitimate reasons for remote monitoring and automated control, but convenience should not always prevail over resilience. Critical systems should retain appropriate independent safeguards, manual operating capabilities where feasible, secure network separation and tested recovery procedures. Greater technological sophistication does not necessarily mean greater security.
This also raises a broader philosophical question about the direction of modern civilisation. Technological progress is usually presented as a continuous movement towards greater efficiency, convenience and control. Yet every new layer of complexity can create dependencies that are difficult to reverse. A society that cannot obtain food, water, fuel or money without functioning digital systems may be more efficient under normal circumstances while becoming more vulnerable during emergencies.
The ancient principle of not placing all one's eggs in one basket remains relevant. A resilient civilisation requires redundancy, decentralisation and the capacity to function when sophisticated systems fail. Local electricity generation, independent communications, household preparedness and the preservation of practical skills are not signs of technological backwardness. They are sensible protections against the consequences of excessive dependence.
The threat of AI-enabled cyberwarfare is therefore not simply another cybersecurity problem to be delegated to computer specialists. It concerns the organisation of modern society itself. Australia cannot prevent every hostile cyberattack, nor can it guarantee that its electricity infrastructure will always remain operational. It can, however, reduce vulnerabilities, improve recovery capabilities and encourage citizens to take reasonable precautions.
Michael Snyder's warning deserves attention, even if the most dramatic scenarios remain uncertain. The central lesson is that the electricity grid, upon which modern civilisation depends, is not invulnerable. Artificial intelligence has added another dimension to the threats facing that infrastructure. Australians would be wise to prepare for disruption before a serious incident demonstrates how fragile their technological comforts can be.
https://www.dcceew.gov.au/energy/security/australian-energy-sector-cyber-security-framework
https://michaeltsnyder.substack.com/p/time-to-get-prepared-ai-cyberattacks