For awareness Medium Check exposure in your normal cycle
Report warns Chinese solar inverters raise blackout risk
조선일보 (via Google News)energy
What happened. A Chosun Ilbo headline reports that cyber blackout risks are growing as Chinese solar inverters dominate the market. The report gives no further detail, and describes no confirmed attack or named product.
Who is affected. The source does not say which organisations are affected. Triage points to the energy sector and operators of solar inverters.
What to do. Check which solar inverters your site runs and whether they have internet or vendor remote connections.
When to act. For awareness: Energy operators: this is a risk report, not an attack; review inverter exposure at your next planning cycle.
Editor's reading
Forasset ownerOT security lead
- Purdue level
- L3.5
- L1
Why: Inverters are field power equipment (L1), and any vendor remote connection to them would pass through a gateway (L3.5); the report itself gives no technical detail.
- Are you exposed?
Check your asset inventory for solar inverters and their vendor remote-access or cloud connections.
- If you cannot fix it yet
- Block direct internet access to inverter management interfaces.
- Route any vendor remote access through a controlled gateway with multi-factor authentication.
- Watch for
- Outbound connections from inverters or their controllers to unexpected external addresses.
Inferred from the facts above, not stated by the source. Check it against your own site before acting.
Source: 조선일보 (via Google News) (opens news.google.com)
More on Energy and power