Skip to main content
Threat IntelligenceEmerging Threats

Cyberattacks Expose Growing Risks to Real-World Infrastructure

Control room with analog and digital equipment for managing critical infrastructure.
"Cyberattacks aren’t just taking computers offline." — General (Ret.) David Petraeus

That blunt line, lifted from the trailer for Semperis’s documentary Midnight in the War Room, frames a central shift described repeatedly in the film: cyber operations are escaping the confines of servers and spreadsheets and now bear the potential to harm food supplies, trains, water systems, power distribution—and people. The trailer gathers former officials and industry voices to place that technical evolution inside a political and operational picture where motive, access, and consequence converge.

Food supply chains, trains, drinking water, and power grids: real-world targets

The documentary argues that the consequences of cyber incidents have outgrown the old damage model of stolen files and disrupted desktops. It cites examples of how attacks can threaten the integrity of food supply chains, derail trains, interfere with drinking water, and disrupt power grids. Those illustrations serve a single point repeated by multiple interviewees: as digital systems knit more services together, compromises in networks can immediately cascade into human risk. When the film’s contributors discuss hospitals, they do so explicitly to show that ransomware and other intrusions can place “real human lives” at risk, not merely produce an IT problem.

Nation-state operations that stop short of kinetic war: Russia, China, North Korea

The trailer places cyber activity in a broader geopolitical context. Former National Cyber Director Chris Inglis recalls a 2008 moment of realization “that nobody was safe,” after the agency discovered that the Russian government had gained access to classified U.S. systems. The film also points to North Korea’s use of stolen Bitcoin infrastructure to finance its nuclear weapons program and notes that Russia and China aim to operate “just below the threshold of kinetic war.” Together these threads underline a strategic objective: network access is not always sought simply for espionage or disruption, but to advance national aims while avoiding traditional armed conflict.

Lowering barriers and asymmetry: tools, motives, and the attacker advantage

Several contributors in the trailer emphasize how cyber operations are becoming easier to execute and more enticing to a broader set of actors. Heath Adams, Co-Founder of BreachPoint, warns that “the next war…is going to be through the wire,” reflecting a belief that conflict and coercion increasingly pass through networks. Former BP CISO Simon Hodgkinson frames the operational asymmetry succinctly: “We have to be right 100 percent of the time; our adversaries only have to be right once.” The film ties that asymmetry to the falling barrier to entry—financial incentives, geopolitical objectives, notoriety, and the availability of effective hacking tools all lower the cost of becoming a successful threat actor.

Complacency and accountability: industry and societal roles

“Complacency is our biggest risk,” Ten Eleven Ventures Partner Grace Cassy tells viewers in the trailer, and the film presses that point into a broader call for accountability. Cybersecurity, the contributors argue, can no longer be treated as “someone else’s job” or a box to tick for compliance. The documentary reframes the war room: it isn’t a single physical place but “nearly everywhere a network runs.” That metaphor compresses the film’s argument into a practical imperative—organizations face a choice about whether they will treat cybersecurity as a strategic imperative or continue to leave critical systems exposed.

What this means for technologists, policymakers, and the public

  • Technologists and security teams — The film’s emphasis on cascading physical effects and low attacker barriers signals a need to design defenses with safety and resilience in mind, not just confidentiality. The trailer’s hospital and infrastructure examples underscore the stakes of endpoint and control-system compromises.
  • Policymakers and regulators — The geopolitical examples in the trailer—Russian access to classified systems, North Korea’s use of stolen cryptocurrency, and the cited posture of Russia and China—frame cyber activity as a tool of statecraft that can fall below traditional thresholds of armed conflict, a dynamic that complicates legal and diplomatic responses.
  • The public and affected enterprises — The documentary’s plain-language examples—food, water, trains, hospitals, power—are a reminder that cybersecurity failures can be visible and immediate. The film’s spread of voices urges organizations and citizens alike to treat digital risk as shared and consequential.

Midnight in the War Room is positioned as both diagnosis and alarm: it collects testimony from former officials, industry founders, and security leaders to argue that cyber risk now reaches beyond data and networks into everyday life. Viewers are invited to watch the full trailer and to reserve a seat for the Washington, DC screening on October 7—an explicit next step the film offers for those seeking deeper engagement.

Read the original story