Assertion Partly supported AI assessment confidence: 85% certainty 4/5 debate potential 1/5

Microsoft research reveals 40% increase in state-sponsored critical infrastructure cyberattacks

Bilal Khashid · How cyber attacks could threaten the energy transition [partner content] · Dec 10, 2024 · at 5:01

Bilal Khashid of Microsoft discusses evolving cybersecurity threats and threat actor motivations targeting critical infrastructure with Stephen Lacey.

0:00 / 0:10exact quote · 10.6s

720p mp4 · rendered on demand · StarZero watermark

“Our own research here at Microsoft shows that we've seen a 40% increase in state-sponsored attacks on critical infrastructure, and the energy sector is high on that list.”

quote is from the automated transcript, cleaned for reading: filler sounds and stutters are removed, nothing is rephrased. names can be misheard (the analysis reads context, assessments check outside sources). how →

The claim, plainly

Microsoft research shows a 40% increase in state-sponsored cyber attacks on critical infrastructure, with the energy sector ranked high on the target list.

a quote alone can be ambiguous, so this restates it with the references and context of the conversation around it resolved. AI-written; the tape below the player is the source.

Assessment

The claim bundles two core assertions: that Microsoft research documented a 40% increase in state-sponsored attacks on critical infrastructure, and that the energy sector was ranked high among targets. The second assertion is fully supported: Microsoft's Digital Defense Reports (2022 and 2023) and Secure Future Initiative publications specifically identify critical infrastructure—including the energy and power grid sectors—as primary targets of state-sponsored threat actors (such as Russian, North Korean, and Iranian groups). However, the first assertion misstates the specific metric in Microsoft's research: Microsoft reported that nation-state attacks targeting critical infrastructure doubled from 20% to 40% of all detected nation-state attacks (and remained at ~40–41% in subsequent reports), rather than measuring a 40% net increase in attacks. Because the underlying research showed critical infrastructure grew to 40% of all nation-state attacks rather than a 40% increase, the claim is partially true.

Microsoft Digital Defense Report 2022 documented that the share of nation-state attacks targeting critical infrastructure doubled from 20% (2020–2021) to 40% (2021–2022).
Microsoft Digital Defense Report 2023 documented that critical infrastructure accounted for 41% of all Nation-State Notifications issued, with energy/power grids among the top targeted sectors.
Microsoft Secure Future Initiative (Nov 2, 2023) reiterated that 40% of all nation-state attacks focused on critical infrastructure, including power grids.

Checked against

[1] securityweek.com [2] microsoft.com [3] privacybee.com [4] forbes.com [5] techtarget.com [6] computerweekly.com [7] nsr-org.no [8] microsoft.com

"Microsoft Digital Defense Report" "energy" target list nation-state OR "state-sponsored" Microsoft research "40%" "state-sponsored" "critical infrastructure" "energy" Microsoft threat intelligence "critical infrastructure" "40%" state-sponsored "Microsoft Digital Defense Report" "critical infrastructure" "40%" OR "40 percent" "Microsoft Digital Defense Report" "critical infrastructure" state-sponsored increase energy "Microsoft Digital Defense Report 2023" "energy" critical infrastructure

assessed as of 2026-09-02

This assessment is an AI reading of a public statement, made against the cited references with the confidence shown. It can be wrong. The quote, the tape and the references are all on this page; if something is off, use report an error below. full disclaimer →

Mentioned

critical infrastructure energy sector Microsoft

⚑ Spot an error? Report it

More from Bilal Khashid

Insight

Grid cybersecurity must shift from perimeter defenses to Zero Trust models

“We have to move away from traditional perimeter defenses to adopting a zero trust mindset, you know, assuming every device is a potential risk.”

Bilal Khashid Dec 10, 2024 ▶ 7:53 How cyber attacks could threaten the energy transition [partner content]

Opinion

Critical infrastructure organizations lack tools to quickly isolate sophisticated cyber threats

“Colonial Pipeline's inability to isolate and recover quickly showed us that many organizations lack the right tools and processes to really handle these sophisticated cyber threats.”

Bilal Khashid Dec 10, 2024 ▶ 9:24 How cyber attacks could threaten the energy transition [partner content]

Assertion Not checkable as stated

Utilities struggle adapting decade-old cybersecurity standards to modern cloud systems

“Many utilities are dealing with legacy systems that weren't designed for modern cybersecurity in mind. You know, so to follow a standard that was built in, you know, 1015 years ago where cloud technologies were not being leveraged and trying to shoehorn that i…”

Bilal Khashid Dec 10, 2024 ▶ 12:17 How cyber attacks could threaten the energy transition [partner content]

Insight

Hackers' primary goal is remaining camouflaged before breaching energy systems

“You know, the number one focus for these hackers are to, are for them to blend in, for them to be camouflaged to avoid them being identified before they get entry into systems.”

Bilal Khashid Dec 10, 2024 ▶ 13:53 How cyber attacks could threaten the energy transition [partner content]

Prediction Not checkable as stated

Quantum encryption could become standard data protection within a few years

“So in a few years, quantum encryption could be the standard for protecting data, you know, taking security beyond anything our current systems could really handle.”

Bilal Khashid Dec 10, 2024 ▶ 19:54 How cyber attacks could threaten the energy transition [partner content]

Assertion Contradicted

Single operator averted disaster during the Oldsmar water plant cyberattack

“You know, in that case, attackers tried to manipulate the chemical levels in the water supply. It was the quick action of a single operator that prevented a disaster.”

Bilal Khashid Dec 10, 2024 ▶ 9:53 How cyber attacks could threaten the energy transition [partner content]

Microsoft research reveals 40% increase in state-sponsored critical infrastructure cyberattacks

More from Bilal Khashid

Turn any episode into a week of clips.