Modat reveals 8,547 exposed European wind and solar systems

by@Reuters

Summary

On October 6, researchers from the Netherlands revealed that thousands of administrative systems at wind and solar power parks across Europe are exposed to the internet, potentially allowing attackers to gain control over critical operations. The assessment identified 8,547 exposed systems linked to 35 countries, with around 181 sites being particularly vulnerable to full control by malicious actors. This alarming situation emerges amidst growing cybersecurity concerns, as Dutch intelligence agencies have noted that artificial intelligence is heightening threats to critical infrastructure. The researchers urged operators to remove these systems from internet access immediately to prevent potential sabotage, aligning with ongoing fears regarding cyberattacks attributed to state actors since the invasion of Ukraine in 2022.

Analysis

Modat: Modat is an internet-scanning company specializing in identifying exposed online systems and interfaces. In this news, researchers from Modat contributed to mapping thousands of administrative and operational interfaces at European wind and solar sites, highlighting risks of unauthorized access and potential sabotage. The company collaborated with the Dutch National Cyber Security Centre on the findings presented at the ONE Conference. Bouke van Laethem: Bouke van Laethem works at the Dutch National Cyber Security Centre, contributing expertise on national cyber defense and infrastructure protection. He co-authored and presented the research on exposed wind and solar systems, stressing the need to secure administrative interfaces. Van Laethem delivered the findings jointly with Modat researchers at the ONE Conference. Soufian El Yadmani: Soufian El Yadmani is a researcher at the internet-scanning company Modat who specializes in identifying publicly accessible systems. He contributed to the study revealing exposed interfaces at European renewable energy sites and emphasized the ease with which attackers could map similar vulnerabilities. El Yadmani presented the findings alongside colleagues at the ONE Conference in The Hague. Dutch National Cyber Security Centre: The Dutch National Cyber Security Centre is a government body focused on protecting national digital infrastructure and responding to cyber threats. Bouke van Laethem from the centre co-presented research on exposed energy systems, underscoring vulnerabilities in critical infrastructure. The centre partnered with Modat to analyze and publicize the exposure of wind and solar power interfaces across Europe. Infrastructure Risks: The findings align with ongoing concerns about Europe's energy systems facing suspected sabotage and cyberattacks attributed to state actors since 2022. Cybersecurity Concerns: Dutch intelligence agencies warned last month that artificial intelligence is accelerating threats to critical infrastructure.

Categories

macropolitics
View Original Tweet