U.S. Cyber Chief Declares Infrastructure Disruptions Inevitable Amid China Threat
CISA's acting director shifted U.S. doctrine from prevention to resilience on June 17, with direct implications for how energy utilities plan and invest.
America's acting cybersecurity chief declared on Wednesday (2026-06-17) that major disruptions to U.S. critical infrastructure are inevitable, telling a Washington audience that resilience — not prevention — must now define how energy operators, utilities and communications providers prepare for sophisticated adversaries. The Cybersecurity and Infrastructure Security Agency official specifically cited China among the primary threats bearing on systems that underpin American power, water and transport networks.7
That framing departs from how the sector has traditionally been regulated and financed. If disruption is assumed rather than prevented, operators face a different investment calculus: redundancy, manual fallbacks and rapid recovery matter as much as perimeter defences. For power companies and grid operators, those costs are significant and largely unrecovered under current rate structures.7
The intelligence picture behind the warning has been building for some time. Economist reporting from May 2026 described how Beijing has positioned forces for potential wartime sabotage of U.S. assets in the Pacific, with Guam — hosting expanded American airfields — specifically cited as an early target. The strategy blends cyber intrusion with the physical threat of infrastructure destruction, making the two exposures inseparable in any credible threat model.5
Undersea cables represent a further vector. Research commissioned by the British government from RAND Europe found that the cables carrying transatlantic communications and financial data have effectively become military targets, with China and Russia each investing in surface vessels capable of severing or monitoring those links. Energy trading systems, settlement platforms and price discovery infrastructure depend on the same cable network as financial markets.4
The power sector faces compounding exposures. A bottleneck in U.S. grid interconnection queues is already limiting data centre buildouts, constraining the AI investment cycle at a moment when competition with China's state-backed technology sector is acute. A successful cyberattack on grid control systems would compound an infrastructure deficit that already appears structural.6
Battery storage has moved from peripheral to strategic in this context. Fluence Energy, which supplies grid-scale battery systems to U.S. utilities and data centre operators, reported a record order backlog in May 2026 and disclosed master supply agreements with two large hyperscalers. The company's shares rose 98 percent in a single week in May as capital rotated into power infrastructure names. Management reaffirmed a 2026 revenue target of $3.2 billion to $3.6 billion, citing 85 percent of the midpoint already under contract.2,3
Fluence's commercial traction has limits visible in its own filings. The company continues to run operating losses, and a secondary offering of 20 million Class A shares in mid-May 2026, priced around $21.00, introduced meaningful dilution, generating price volatility and concern about institutional exits. Market capitalisation stood near $3.6 billion as of late May 2026.1,2
The broader equity market is pricing increased uncertainty. The CBOE Volatility Index rose 12.79 percent to 19.49 on Wednesday (2026-06-24), a move that tends to compress risk appetite for capital-intensive infrastructure plays in the near term even as it reinforces the strategic case for resilience investment.
What remains unresolved is whether utilities can absorb resilience spending under current rate structures, or whether federal policy will need to make it cost-recoverable. CISA's acting director did not specify what mechanism would follow the warning. The next concrete signal is likely to come from how regulators respond to major grid operators' cyber disclosures in upcoming quarterly filings — and whether any legislative push for a resilience mandate accompanies this shift in the agency's posture.7