CYBERSECURITYTRACKER
Permanent story citation

Europe’s wind and solar farms leave controls exposed, raising the risk of sabotage

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 9607

As cited

Copy frozen at (site build).

ot ics

Europe’s wind and solar farms leave controls exposed, raising the risk of sabotage

Dutch researchers identified 8,547 internet-facing administrative and operational systems across 7,942 solar parks and 605 wind farms in 35 European countries using machine learning to scan for exposed interfaces. Around 181 sites had systems that researchers believe would have allowed full operational control, including the ability to start, stop, and reset turbines. The exposed systems ranged from login pages to live dashboards displaying turbine location and control buttons, prompting researchers to urge operators to immediately remove administrative interfaces from internet access.

Why it matters: Energy operators and infrastructure owners across Europe face imminent risk of sabotage or service disruption; attackers using the same scanning techniques can identify and potentially compromise turbines and arrays supplying power to critical facilities like airports and cities.

VendorsGoogle
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

ot ics

Europe’s wind and solar farms leave controls exposed, raising the risk of sabotage

Dutch researchers identified 8,547 internet-facing administrative and operational systems across 7,942 solar parks and 605 wind farms in 35 European countries using machine learning to scan for exposed interfaces. Around 181 sites had systems that researchers believe would have allowed full operational control, including the ability to start, stop, and reset turbines. The exposed systems ranged from login pages to live dashboards displaying turbine location and control buttons, prompting researchers to urge operators to immediately remove administrative interfaces from internet access.

Why it matters: Energy operators and infrastructure owners across Europe face imminent risk of sabotage or service disruption; attackers using the same scanning techniques can identify and potentially compromise turbines and arrays supplying power to critical facilities like airports and cities.

VendorsGoogle
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary