Interesting, it seems the same happens again and again - but this time at least it gets more attention.
Three years ago I did some work about cybersecurity of solar inverters, contacted authorities, did a 39C3 presentation, but not much happened. At least the companies patched the most urgent stuff (crazy stuff actually).
Three years ago I did some work about cybersecurity of solar inverters, contacted authorities, did a 39C3 presentation, but not much happened. At least the companies patched the most urgent stuff (crazy stuff actually).
For the record, here is some of my work:
* https://itmeetsot.eu/posts/2024-01-31-Balcony_in_the_cloud/ (Hoymiles)
* https://itmeetsot.eu/posts/2024-04-21-solarflaresec/ (Sungrow, the same company as in the article, 10 GW were vulnerable at that time)
* https://itmeetsot.eu/posts/2024-06-18-cybereclipse/ (Solax, a similar admin privilege escalation on their cloud platform)
* https://itmeetsot.eu/posts/2024-07-27-securewatt/ (Growatt)