Original title: Grid Trouble in Paradise: Uncovering Vulnerable Distributed Energy Resources and Their Grid-Level Risks
Anna Raymaker, Samuel Talkington, Zeezoo Ryu, Richard Asiamah +7 · September 2026
Solar power systems like panels, invertersDevices that convert solar panels' direct-current electricity into the alternating-current electricity used by the grid., and monitors have grown rapidly around the world. To let owners and technicians manage them, many of these systems are plugged directly into the public Internet. However, regular users and installers often set them up without proper security, leaving it unclear how many are exposed to hackers or what might happen to the electric grid. To find out, researchers created a new scanning method to search the Internet for these solar devices. They discovered over 66,000 solar systems exposed online. Even worse, at least 10,000 of them had known security flaws that could let outsiders control them without needing a password. The team then simulated these attacks on a real-world model of the electric grid in Oahu, Hawaii. They found that attackers could manipulate these hijacked systems to cause line overloads and voltage problems, potentially triggering equipment damage, poor power quality, or full blackouts.
Imagine you run a small shop and install a smart doorbell so you can watch the front door from your phone. You give the same login to every delivery person, and one day a stranger uses it to turn off your lights while you are closed. The shop is fine, but the whole block's wiring was designed assuming your lights stay on, so the street's equipment suddenly strains. In this paper, the shop is one of these solar power devices, the weak login is a known software flaw, and the researchers show that many small compromises together can push an entire island's power system past its limits.
Power grids are critical infrastructure. If attackers compromise enough solar inverters, they can destabilize the grid and cause outages. This matters to utilities, regulators, and anyone who relies on electricity — especially in sunny regions where solar is widespread. The paper shows the threat is real today, not hypothetical.
The abstract doesn't say whether any real-world attack has occurred; the grid analysis is a simulation on one model network. It also doesn't say how many of the 10,000 vulnerable devices are actually reachable or exploitable in practice, or whether the specific outages would occur in other grids.
Ask anything about this paper. Answers come from its abstract, and say so when the abstract doesn't cover your question.
Grid Trouble in Paradise: Uncovering Vulnerable Distributed Energy Resources and Their Grid-Level Risks — Anna Raymaker, Samuel Talkington, Zeezoo Ryu et al.
Abstract licence: CC0
Explanation generated by Synthesis from the abstract — it is not the original paper. This is a preprint, so it hasn't necessarily been peer reviewed.