A Closer Look at the Gaps in the Grid - New Vulnerabilities and Exploits Affecting Solar Power

Explore critical cybersecurity vulnerabilities in distributed solar power systems through this 43-minute Black Hat conference presentation. Discover how security researchers analyzed products from leading solar vendors including Sungrow, Growatt, and SMA, uncovering nearly 50 new vulnerabilities across the entire solar ecosystem from power inverters and network dongles to mobile applications and cloud backends. Learn about complete exploit chains that enable remote control of power inverter fleets, potentially allowing coordinated attacks against power grids that are difficult to stop during execution and may force emergency responses like load shedding. Examine the broader implications of these "typical" IoT security issues in critical infrastructure, including privacy vulnerabilities that can compromise user accounts and leak personal data. Understand why distributed energy resources, despite their growing gigawatt-scale collective impact on grid stability, often treat cybersecurity as an afterthought due to cost constraints and technology immaturity. Gain insights into potential incident response strategies, ongoing risk mitigation initiatives, and the urgent need for continued security research in the distributed energy sector as these systems become increasingly essential to worldwide power grids.