Cybersecurity

Market forces are playing as much if not more of a role than regulatory policy in the transition from fossil-fueled power generation to renewables, as utilities in the U.S. and worldwide establish decarbonization goals. That was the message from Bill Ritter Jr., former governor of Colorado, during his keynote address at POWER’s Distributed Energy Conference […]

Malware detected at the Kundankulam nuclear power plant in India’s state of Tamil Nadu has not affected plant systems, an investigation by Nuclear Power Corp. of India (NPCIL), the nation’s nuclear plant operator, confirms.  The entity said in a press release on Oct. 30 that it discovered the malware on Sept. 4 on the personal […]

What does it mean to have “extreme visibility” in an operational technology (OT) environment? According to Claroty, a New York-based company that offers cybersecurity products for industrial control systems, it’s having the ability to see all assets on a network, knowing what they are, and understanding what functions they perform. The company says the more […]

Delivering energy has centered on the fundamental tenant of being reliably available. As energy providers strive to maintain that availability, they all too often push security to the backburner. Many unsafe practices have fallen into place for the sake of speed and efficiency, including the use of default and shared passwords, open access, and little […]

The names of bulk power system entities that violate federal critical infrastructure cybersecurity reliability standards—along with identification of standards violated and penalties assessed—may soon be routinely disclosed under changes proposed by the Federal Energy Regulatory Commission (FERC) and the North American Reliability Corp. (NERC).  The proposed changes, which FERC and NERC outlined in an Aug. […]

XENOTIME, a cyberthreat activity group thought responsible for TRISIS/TRITON malware attacks on safety instrumented systems (SIS) at an oil and gas Middle Eastern facility in 2017, has been probing power company networks in the U.S. and elsewhere, new intelligence from industrial control systems (ICS) security firm Dragos shows.  “In February 2019, Dragos identified a change in […]

The Department of Energy (DOE) in March 2018 released a 52-page report outlining its multi-year strategy to improve cybersecurity. In the report’s introduction, Assistant Secretary Bruce J. Walker noted that

Depending on the hazard field, electromagnetic pulses (EMPs) resulting from detonation of a nuclear weapon at high altitude or in space could cause significant damage to electronics on the bulk power system and even prompt a regional voltage collapse, the Electric Power Research Institute (EPRI) says in much-anticipated findings from its three-year study on high-altitude […]

The malicious threat landscape for industrial control systems (ICSs) is constantly evolving and getting more sophisticated, thereby raising the need to have visibility, implement protective controls, and perform continuous monitoring. As a result, it is important to take a look at the attack vectors of some malware/malicious events—such as Triton—that have occurred over the last […]

The smart grid offers great promise to transform the electric system, enabling two-way communication between providers and consumers over the network, and allowing new services that can save electricity and

Cybersecurity firm FireEye has uncovered and is responding to a new intrusion at an unnamed critical infrastructure facility that it suggests in an April 10 blog post was perpetrated by the group behind the TRITON attack, which prompted a process shutdown at a Middle Eastern facility in 2017. But while details of the new attack are sparse, […]

Cyber-attacks on industrial control systems (ICSs) are no longer a hypothetical. As pieced together by the Wall Street Journal, in 2017, Russian hackers attacked a small construction company, exploiting the organization’s connections with utilities and government agencies. Through an integrator, the hackers accessed computer-network credentials, giving them the ability to get into computer systems that […]

The world’s first autonomous combined cycle power plant is currently under construction at the Takasago Machinery Works facility in Japan, and it will be operational by 2020, according to Mitsubishi Hitachi

When conversations around the power industry turn to computer hacking, more often than not experts say it’s not a question of if, but rather, how systems have been compromised. William Doering, adjunct professor in the online Master’s in Business Administration program at Maryville University and a director with Guidehouse—a management consulting services provider—said he has participated […]

President Trump has signed an executive order (EO) to boost coordination for and national resilience against electromagnetic pulse (EMP) threats—both from nuclear warfare and natural events like solar superstorms. The action suggests new federal mandates to protect critical infrastructure against EMP events and attacks may be on the horizon.  Senior Trump administration officials from the National Security […]

Norsk Hydro, a major global aluminum producer that is also Norway’s third-largest producer of hydropower, has been stricken by an extensive cyberattack—reportedly ransomware—that forced its entire global network offline. The company powers its sizable aluminum production operations with 20 hydropower plants concentrated in Telemark, Røldal-Suldal, Sogn, and Vennesla, producing a total 10 TWh per year. […]

New Secure Media Exchange release goes beyond malware detection to identify next wave of USB attack types, keeping human authentication part of security  HOUSTON, Feb. 4, 2019 — Honeywell (NYSE: HON) today announced the latest release of Secure Media Exchange (SMX), a cybersecurity solution to protect industrial operators against new and emerging Universal Serial Bus (USB) […]

The U.S. Department of Energy (DOE) and Federal Energy Regulatory Commission (FERC) want to explore how federal and state authorities could incentivize cybersecurity and physical security in the power and natural gas sectors. The agencies issued a notice on Feb. 4 announcing they would jointly hold a technical conference on Thursday, March 28, 2019, from […]

Behind the digital tools that make the industrial internet of things (IIOT) in the power generation and chemical process industries are people. The upcoming Connected Plant Conference—Feb. 19–21, 2019, in Charlotte, North Carolina—will recognize the achievements of 11 individuals and companies who are fast risers in the field. Through insight and experience, these “Game Changer” champions […]

Power generators continue to expand their use of digital technologies. Data analytics, artificial intelligence, and machine learning are all part of a rapid transformation in how utilities are improving the

An Electric Power Research Institute-led collaborative utility project, called I4Gen (Insight through the Integration of Information for Intelligent Generation), is exploring new technologies for digitally

A key aspect of any digitization effort is providing easy access to data by engineersand other experts so they can perform advanced analytics to improve outcomes. In the March 2018 issue of POWER, an article

Industrial control system cybersecurity is today largely focused on securing networks, and efforts largely ignore process control equipment that is crucial for plant safety and reliability, leaving it woefully

Tablet increases safety, ease-of-use for mobile workers in oil and gas, chemical, pharmaceuticals and other hazardous industries TWINSBURG, OH (January 22, 2019) – ecom, a Pepperl+Fuchs brand and pioneer in hazardous area mobile devices, today introduced the next generation of their groundbreaking Tab-Ex 02® DZ1 , a tablet based on the ruggedized Samsung Galaxy Tab […]

Ensuring continuity is essential for power and utility services. Security experts in this industry must protect systems and data from cyber threats.

Before industrial control systems (ICSs) were network-connected, operators had little to worry about in the way of cyber threats. But as industrial environments, such as energy utilities, become more connected, they’re exposed to vulnerabilities and attacks. ICSs are used in large amounts of critical infrastructure, including the electrical grid, transportation systems, and wastewater plants. How […]

The power sector’s terror of a debilitating cybersecurity attack is magnified seemingly every day as new vulnerabilities or destructive threat actors are identified. But according to several industrial

Supports modern plants with the digital transformation of OT and IT environments Combines Voith’s in-depth knowledge of the OT and IIoT domain with Kudelski’s expertise in hardware- and software-based cybersecurity solutions Delivers tangible cybersecurity products and services for power generation and other industrial sectors YORK, Pa. / CHESEAUX-SUR-LAUSANNE, Switzerland – Voith, a global technology group that […]

Entities with industrial control systems (ICS) associated with bulk electric system (BES) operations must develop and implement plans that include security controls for supply chain management, the Federal Energy Regulatory Commission (FERC) ordered in a final rule that formally adopts three new critical infrastructure protection (CIP) reliability standards.  FERC on October 18 issued Order No. […]