Researchers Uncover Vulnerabilities in Solarman and Deye Solar Systems

August 12, 2024 at 07:12AM Cybersecurity researchers discovered vulnerabilities in photovoltaic system management platforms by Chinese companies Solarman and Deye, posing a risk of power blackouts if exploited. The shortcomings, including account takeover and information leaks, have been addressed as of July 2024. The vulnerabilities could allow attackers to take over accounts, control inverters, and … Read more

Solar Power Installations Worldwide Open to Cloud API Bugs

August 9, 2024 at 02:48PM An analysis of Solarman and Deye Cloud for managing solar power installations uncovered vulnerabilities in their cloud APIs. Bitdefender researchers found that unauthorized parties could alter inverter settings and access personally identifiable information via these APIs. Potential consequences include destabilizing the power grid and compromising a significant amount of solar … Read more

250 Organizations Take Part in Electrical Grid Security Exercise

November 20, 2023 at 06:03AM GridEx VII, the largest grid security exercise in North America, saw participation from over 250 organizations and focused on testing crisis response and recovery plans for cyber and physical threats to the electrical grid. A report with lessons learned is expected in Q1 2024. Previous objectives included coordination between the … Read more