American critical infrastructure is facing a changing security environment in which inexpensive commercial hardware can threaten assets worth tens of millions of dollars. That imbalance raises questions about whether existing defenses are prepared for asymmetric warfare.

Operation Spiderweb illustrates the potential scale of the problem. The operation reportedly caused about $7 billion in damage to Russian interests, showing how relatively modest resources can be used against strategically important targets.

A separate campaign targeting refineries has developed more slowly, but the description suggests it has produced a comparable concern for infrastructure protection. Together, these examples highlight the challenge of defending high-value systems against lower-cost, adaptable threats.

The issue extends beyond the damage caused by any single operation. It also concerns whether American planning, security measures and resilience strategies can keep pace with the growing availability of commercial technology for attacks on critical infrastructure.