White hat hacker shines spotlight on vulnerability of solar panels installed in Europe - EURACTIV

White hat hacker shines spotlight on vulnerability of solar panels installed in Europe - Euractiv
By Nikolaus J. Kurmayer | Euractiv Est. 3min 14-08-2024 (updated: 14-08-2024 ) Content-Type: News News Based on facts, either observed and verified directly by the reporter, or reported and verified from knowledgeable sources. Dutch solar panels have proven vulnerable to cyperspace attacks, an ehtical hacker was able to show, adding to concerns over the security of Europe's future energy system. [Shutterstock/NataliAlba] Euractiv is part of the Trust Project >>> Print Email Facebook X LinkedIn WhatsApp Telegram An ethical hack of solar panels in the Netherlands has revealed their vulnerability to cyber attacks, prompting industry calls for more rigorous safety assessments. While wind turbines, which are highly networked and equipped with hundreds of sensors, are traditionally considered more vulnerable to outside interference than solar panels, a Dutch citizen may have proved otherwise. A Dutch white hat hacker could have gained control of millions of smart solar panel systems, reports investigative outlet FollowTheMoney, using a backdoor. The findings confirm a 2023 report by a Dutch agency which found that converters, essential parts of solar panels that make the electricity suitable for the power grid and which are usually connected to the web, can be “easily hacked, remotely disabled or used for DDoS [Distributed Denial of Service] attacks.” DDoS is one of the most common types of attacks, which basically try to overwhelm a system. EU industry association SolarPower Europe said the bloc “needs more robust cybersecurity rules for distributed energy sources” in a statement commenting on the hack. The share of solar power in the European grid has surged from 1% in 2010 to 9% in 2023, and with it the disruptive potential of a cyberattack on solar panels has likewise grown. “Devices that can be centrally co-ordinated or managed (for example, aggregated rooftop solar installations) must be subject to an EU or nationally authorised layer of monitoring,” stressed Dries Acke, deputy CEO of the lobby group. A report by the EU’s own cybersecurity agency from 24 July found that the union is ill-prepared for a concerted attack on its energy infrastructure, whether by a foreign state or by malicious insiders. With electricity being so essential, any attack on Europe “attracts considerable pre-positioning activity by advanced threat actors” in the power sector should they aim at “executing a destructive attack” it adds. Solar panels were outlined as a vulnerability in several scenarios, also due to the dominance of a single country, China, in the supply chain. The industry says that while laws like the updated EU Network and Information Security Directive, known as NIS2, and the Cyber Resilience Act are a start, more action is needed: solar panels should be classified as a critical product, which means they’d be subject to more rigorous assessments. These concerns come as the EU’s home-grown solar industry cites cybersecurity as a reason why they should receive preferential treatment, which would help them regain market share from Chinese competitors. “Future-looking cyber requirements should come under an EU Electrification Action Plan,” said Acke, adding that “Europe must learn from its recent lessons in energy security, and map a secure path forward.” Breton puts his weight behind EU's forthcoming Solar Charter The EU’s Single Market Commissioner Thierry Breton has expressed his support for the European solar charter, a new document designed to boost support for domestic solar manufacturers. [Edited by Chris Powers] Read more with Euractiv European gas price hike boosts Russian fuel sales, outstriping total EU aid to UkraineThe rise in gas prices in Europe that has been attributed to Ukraine's recent invasion of Kursk is expected to add to Russian revenues from selling fossil fuels, further widening the gap between such revenues and the total amount of EU support to Kyiv. Print Email Facebook X LinkedIn WhatsApp Telegram Topics China Cybersecurity Energy & Environment Solar solar power The Netherlands