Norway is on high alert for cyber attacks targeting its essential petroleum industry, following alarming reports from its three national intelligence agencies. These reports highlight persistent and serious threats from countries such as Russia, China, and Iran, exacerbated by the capabilities of artificial intelligence (AI).
The head of Norway's police intelligence service (PST) has stated that the country is facing the greatest threat to its critical national infrastructure (CNI) since World War II. The assessment reveals vulnerabilities in the software that supports Norway's oil and gas operations, marking the nation as a more attractive target for foreign military cyber operations due to Europe's increasing reliance on its energy supplies since Russia's invasion of Ukraine.
The Norwegian Intelligence Service (NIS) has noted that both Russia and China are actively mapping Norway’s offshore industrial and digital infrastructure. They are infiltrating networks and supply chains while utilizing proxies for their operations. Iran has been reported to collaborate with Swedish criminal gangs to plan cyber sabotage and terrorist attacks, indicating a more sophisticated threat landscape, especially with the backing of foreign military intelligence.
Norway’s operational technology (OT) systems, which control a wide range of critical infrastructure from oil rigs to power plants, are increasingly vulnerable. The National Security Authority (NSM) reported that much of the software in use is outdated and insecure, as highlighted in its annual threat assessment published on February 6. “Many OT systems were designed without a focus on cybersecurity,” the report stated, revealing that these systems are now being brought online, exposing critical vulnerabilities.
AI and Data in the Petroleum Sector
The integration of AI and data in Norway's oil and gas sector has become a double-edged sword. While AI is seen as a means to enhance efficiency and drive digital transformation, the same technologies also present new security risks. The petroleum industry is crucial for Norway, accounting for half of the nation’s exports, and regulatory bodies like Havtil have identified security weaknesses similar to those observed across other sectors.
Havtil's threat assessment, released on February 12, acknowledged that while challenges persist with older OT systems, the industry is transitioning to newer, more secure technologies. “The challenge is diminishing, as most systems today are newer and more modern,” the agency stated.
Recent Cyber Incident Trends
In 2024, only 1% of cyber incidents in Norway were reported in the petroleum sector, according to the Risiko 2025 report. Cyber incident center KraftCert noted that attacks on the sector have traditionally been rare. However, escalating geopolitical tensions could change this trend, as evidenced by the heightened awareness following cyber sabotage incidents elsewhere in Europe.
Security firm DNV Cyber tracked 21 cyber incidents in Norway the previous year, with only one occurring in the petroleum sector. Most attacks were attributed to criminal activity, but the growing threat of state-sponsored cyber attacks is prompting increased vigilance among industry leaders.
Supply Chain Vulnerabilities
The integration of OT and IT systems across all industrial sectors is exposing vulnerabilities that may be exploited by malicious actors. While the petroleum sector has been quicker to adopt new technologies compared to others, the risks associated with supply chains remain critical. Experts like Sokratis Katsikas from the Norwegian Center for Cybersecurity have highlighted that supply chains can significantly compromise organizational security.
Equinor, Norway’s largest oil producer, implements robust security measures to counteract potential cyber threats. The company employs a defense-in-depth strategy, which includes thorough management of IT and OT environments, continuous risk management, and modernizing systems to enhance cybersecurity.
Preparing for Future Threats
As Norway ramps up its cyber preparedness, it has begun implementing new laws to bolster cybersecurity in line with EU directives. These initiatives include a national website for cybersecurity awareness and steps to secure consumer electronics. Moreover, the government is enhancing its digital and energy infrastructure to withstand potential attacks, reflecting a strategic pivot towards a more secure operational environment.
In the backdrop of these developments, the integration of AI into Norway's subsea fiber-optic networks aims to create a sensor system capable of detecting threats to critical infrastructure. This proactive approach underscores Norway's commitment to safeguarding its vital petroleum industry against emerging cyber threats.
Source: ComputerWeekly.com News