!! The list currently ends in February 2025 and will be completed in the near future. !!

This is not a comprehensive news archive. Entries are filtered to include only events that materially shaped understanding at that time. Entries are ordered chronologically, starting in January 2025. Each item can be expanded to view the full summary and source context by clicking into the box.

• Category: Policy & Standards
  Title: Cybersecurity Baselines for Electric Distribution Systems and DER, Interim Implementation Guidance (Scope and Prioritization)
  Date: Jan 2025

  Summary
  The U.S. Department of Energy’s CESER and the National Association of Regulatory Utility Commissioners (NARUC) published an interim implementation guidance document to support adoption of the “Cybersecurity Baselines for Electric Distribution Systems and DERs.” The guidance is explicitly framed as voluntary and interim, intended to be expanded in a final version. It focuses on two practical implementation problems that often block progress in distribution and DER cybersecurity: defining which assets should be in scope, and prioritizing which baseline controls should be implemented first when full adoption is not feasible at once. The document positions the baselines as a non-prescriptive minimum control set that states and oversight bodies can adopt either as voluntary guidance or as mandatory requirements, while acknowledging that current jurisdictional models may limit regulator authority over some DER assets and that new authorities or legislation may be needed in some cases.
  
  Why it matters
  This is a concrete signal that distribution systems and DER are now treated as requiring baseline cybersecurity controls, not ad hoc best practices. The emphasis on scoping and prioritization reflects a core structural problem in inverter and DER ecosystems: a growing share of grid-relevant assets sits outside traditional utility perimeters and outside consistent oversight, so security depends on making governance, visibility, and minimum controls implementable at scale rather than optional.

• Category: Incidents & Grid Resilience
  Title: Island-Wide Puerto Rico Blackout Highlights Chronic Fragility and Recovery Constraints
  Date: 31 Dec 2024 – 3 Jan 2025 (reporting window)

  Summary
  An island-wide power outage in Puerto Rico around New Year’s Eve disrupted service for a large share of customers and required staged restoration. Reporting emphasized that the immediate technical cause was still under investigation during early restoration updates, while operators warned that additional service interruptions and load shedding could follow because generation and grid operations were stabilizing on fragile infrastructure. Business reporting described knock-on impacts on small enterprises, including loss of perishables, disrupted payment systems and connectivity, refunds, and reduced operating capacity even after electricity returned.
  
  Source Perspectives
  Operational and social impact reporting: Coverage highlighted the scale of customer disruption and the practical consequences for households and businesses during restoration, including continued instability after initial power return.
  Structural context: Academic and expert commentary framed the outage as consistent with long-running grid fragility shaped by underinvestment and slow modernization, rather than as a one-off anomaly.
  Resilience and mitigation framing: MIT reporting used Puerto Rico as a reference case for grid-resilience methods, arguing that improving reliability requires better monitoring, planning, and system-level optimization.
  
  Why it matters
  This incident reinforces that grid disruption can be societally decisive even without adversary action. It shows how quickly economic and public-order effects accumulate when electricity, communications, and payments fail together, and it illustrates why resilience is increasingly treated as a security and governance problem, not only an engineering reliability issue.

• Category: System Reliability & Grid Stress
  Title: Power Grid Operator Scrambles to Avert Blackout Threat in the UK
  Date: 8 Jan 2025

  Summary
  Sky News reported that the United Kingdom’s newly formed National Energy System Operator (NESO) issued a system margin notice urging electricity providers to bolster output to avoid potential grid stress amid plunging winter temperatures. The alert, designed to encourage additional generation and increase safety margins between supply and demand, was the first such warning of the winter and reflected concerns about limited spare capacity during peak demand hours. NESO emphasized that the notice did not mean blackouts were imminent or that there was insufficient current supply, but that tightening margins due to cold weather and reduced wind generation posed a risk of strained system conditions.

  Why it matters
  This event illustrates how conventional reliability concerns-such as weather-driven demand spikes and generation mix constraints-can lead grid operators to issue formal alerts aimed at averting capacity shortfalls. It underscores that even in mature systems, physical and operational stress can challenge supply-demand balance in the absence of extreme disruptive events.

• Category: Vulnerabilities & Technical Exposure
  Title: BlinkenCity Research Highlights Weak Security in Longwave Radio Ripple Control Used for Loads and Renewable Generation
  Date: 10 Jan 2025

  Summary
  Positive Security published a write-up of its 38C3 “BlinkenCity” research examining longwave radio ripple control systems used in parts of Europe to remotely switch loads and control elements of renewable energy production. The authors argue that the protocols in use are unencrypted and unauthenticated and that, in consequence, an attacker with the ability to transmit could spoof control messages and influence large numbers of receivers.

  Why it matters
  This is a reminder that not all control surfaces in modern power systems are IP-based. Grid-relevant coordination can also depend on legacy broadcast control mechanisms that were designed for reliability, not adversarial environments.

• Category: Vulnerabilities & Technical Exposure
  Title: DIVD Press Release Reports 17 Zero-Day Vulnerabilities in EV Chargers With Potential Grid Impact
  Date: 12 Jan 2025

  Summary
  The Dutch Institute for Vulnerability Disclosure (DIVD) reported discovery of 17 previously unknown vulnerabilities affecting iocharger AC-model EV chargers. DIVD stated the issues could have allowed unauthorized control of chargers from that manufacturer and noted potential for grid destabilization if exploited at scale. DIVD reported that 16 of the 17 vulnerabilities were resolved and disclosed in coordination with the manufacturer, and that the same vulnerable firmware also appeared across other AC models, including units sold under different brand names, though the affected rebrands could not be fully identified.

  Why it matters
  This is another example of how distributed energy-adjacent devices can become grid-relevant through aggregation while remaining difficult to patch and audit in practice. The case also reinforces a recurring governance gap in consumer-facing energy tech.

• Category: System Reliability & Grid Stress
  Title: NERC Warns Half of North America’s Power Grids Face Blackout Risks
  Date: 15 Jan 2025

  Summary
  The Energy Mix reports that North American Electric Reliability Corporation (NERC) issued its 2024 Long-Term Reliability Assessment, warning that nearly half of North America’s regional grids could face capacity shortfalls and blackout risks under extreme weather and high-demand conditions in the coming decade. The assessment cites rising electrification, the retirement of dispatchable generation, increased weather-related stress, and transmission constraints as key drivers of system vulnerability. The report highlights that without additional investment in generation, transmission, and grid flexibility, multiple regions could experience loss of load events during peak demand periods.

  Why it matters
  This warning illustrates that capacity and reliability stresses are emerging across multiple North American grid regions absent a specific disruptive event, underscoring that structural bottlenecks and weather-driven extremes remain central challenges in grid security.

• Category: Policy & Regulation
  Title: Germany’s “Solarspitzen” Law Debate: BSI Warns Against Manufacturer-Run Remote Control of PV Inverters
  Date: 20 Jan 2025

  Summary
  pv magazine Deutschland reported that Germany’s Federal Office for Information Security (BSI) raised concerns about proposals linked to the “Solarspitzen-Gesetz” framework that could allow centrally managed, grid-supportive control of PV systems. BSI’s core warning was that implementing grid-relevant remote control through component manufacturers, rather than via trusted metering infrastructure, could create a direct access path into a system-relevant share of German electricity supply. The concern is amplified by the fact that a large share of inverters in Germany are produced by Chinese manufacturers and are internet-capable. BSI argued that manufacturer control and manufacturer cloud dependencies increase both coercive-access risk and third-party exploitation risk through vulnerabilities in products or cloud platforms. As an alternative, BSI advocated for keeping PV operation as local as possible and implementing grid-supportive control via intelligent metering systems (smart meters with control boxes).

  Why it matters
  This is a rare case of a European national cybersecurity authority explicitly connecting inverter market concentration and manufacturer cloud control to a system-relevant risk pathway.

• Category: Policy & Regulation
  Title: European Commission Consults on Non-Price Criteria for Renewable Energy Auctions
  Date: 27 Jan 2025

  Summary
  pv magazine reported that the European Commission opened a public consultation on how non-price criteria should be specified and applied in future renewable energy auctions. The consultation concerns a draft implementing regulation intended to clarify the meaning of criteria and support uniform application across Member States. The draft criteria referenced include responsible business conduct, cybersecurity and data security, and the ability to deliver projects on time, alongside sustainability and resilience-related award or prequalification elements. The consultation was reported as open until 21 Feb 2025, with final adoption planned in Q1 2025.

  Why it matters
  This is an early indicator of how “security and resilience” can be operationalized through procurement and auction design. If implemented with enforceable definitions and verification, non-price criteria can become a practical lever for reducing exposure to Chinese supply chains. If applied loosely, it risks becoming a box-ticking layer that changes little in real purchasing decisions.

• Category: Kinetic Attacks
  Title: Russian Attacks on Ukraine Power Grid Cause Brief Blackouts as US Officials Consider Cease-Fire Push
  Date: 1 Feb 2025

  Summary:
  The New York Post reports that Russian forces launched a large-scale assault on Ukraine’s energy infrastructure using missiles and drones, damaging power systems across multiple regions and triggering temporary blackouts. Ukrainian authorities imposed emergency power outages in key cities to stabilize the grid, with service restored within hours. The attacks occurred amid U.S. discussions of a potential cease-fire and peace talks to end the ongoing conflict.

  Why It Matters:
  This episode underscores the use of energy infrastructure as an explicit target in modern conflict. It also illustrates how energy system disruptions are entangled with broader diplomatic and strategic efforts.

• Category: Vulnerabilities & Technical Exposure
  Title: Cyber-Vulnerable Battery Systems Are Catching Fire and Communicate Directly to China
  Date: 14 Feb 2025

  Summary
  Control Global published an analysis by cybersecurity expert Joe Weiss arguing that networked battery energy storage systems (BESS) and their control systems can be cyber-vulnerable, raising both physical safety and cyber risk concerns. The post highlights that thermal runaway and fires in lithium-ion battery systems occur frequently because of control-system faults, configuration errors, or incompatible control logic, and that some monitoring and safety systems lack authentication and cybersecurity protection. The piece also asserts that a significant portion of BESS instrumentation and control software comes from Chinese suppliers, noting that this introduces risk due to China’s position as a leading supplier and its status as a major cyber threat actor.

  Why it matters
  This commentary draws attention to cyber-physical coupling in energy storage systems. It underscores that as battery storage proliferates and becomes more networked, safety is inseparable from cybersecurity, especially when control planes depend on firmware from globally distributed vendors, including Chinese manufacturers. It also reinforces the point that BESS is emerging as a system-relevant asset in grids.

• Category: Policy & Strategic Risk Analysis
  Title: MI5 Probes National Security Implications of Chinese Technology in the UK’s Energy System
  Date: 15 Feb 2025

  Summary
  Financial Times reporting indicates that the UK’s domestic security agency, MI5, has launched a review of the national security implications of Chinese-linked technologies in the country’s energy infrastructure, including renewable energy systems such as solar panels and industrial batteries. The concern centers on Europe’s growing reliance on Chinese-manufactured energy components and the potential risks that this dependency may pose for critical infrastructure, particularly as Beijing’s influence in global supply chains expands. The investigation reflects heightened scrutiny of foreign technology in grid-relevant sectors amid broader geopolitical tensions.

  Why it matters
  The involvement of a national counter-intelligence agency signals that foreign-sourced energy technologies are no longer viewed only as commercial or reliability issues, but as potential national security risks. Even in the absence of confirmed malicious activity, dependence on externally controlled digital and hardware components from China is now being treated as a strategic exposure rather than a hypothetical concern.

• Category: Research
  Title: “Helpful Hackers Preventing Evil Hackers From Crashing the Grid” (HackerHotel 2025)
  Date: 16 Feb 2025

  Summary
  A HackerHotel 2025 session by DIVD described ongoing work to identify vulnerabilities in energy-sector devices including EV chargers, solar inverters, home batteries, and home energy management systems. The talk frames a structural gap where grid operators typically have control only up to the meter, while many internet-connected energy devices sit behind the meter and remain outside operator visibility. DIVD positions its work as filling this gap through scanning, coordinated vulnerability disclosure, and device testing, and states it will demonstrate outage-relevant scenarios using zero-days found in solar inverters and EV chargers.

  Why it matters
  This is a clear articulation of the behind-the-meter asymmetry: devices outside operator control can still become grid-relevant through aggregation, while visibility and enforcement remain limited. It also shows that researchers are already treating solar inverters and EV chargers as outage-capable assets when vulnerabilities are exploitable at scale.

• Category: Incidents & Grid Reliability
  Title: Nationwide Blackout in Chile Triggers Curfew and State of Emergency
  Date: 25–26 Feb 2025

  Summary
  Chile reportedly experienced a large-scale blackout affecting most of the country, disrupting transport, communications, and essential services. The government declared a state of emergency and imposed a nighttime curfew while restoration was underway. Chile’s grid operator reported that the event involved a disruption on a high-voltage backbone transmission line carrying power from the north toward central regions, while the precise initiating cause was still being clarified during early reporting. Subsequent reporting and operator statements attributed the initiating event to a malfunction in electronic and software-based protection systems that triggered the disconnection of a key 500 kV transmission line operated by ISA Interchile, leading to a cascading collapse of the national system

  Why it matters
  This is a reminder that single points of failure in transmission backbones can still produce nationwide effects, and that governments will treat major blackouts as public order and continuity-of-government events problem.

• Category: Incidents & Grid Reliability
  Title: Summerside, Prince Edward Island Manages Substation-Related Instability With Planned Outage and Temporary Equipment
  Date: 27 Feb 2025

  Summary
  Summerside reportedly faced a local grid reliability situation linked to problems at Maritime Electric’s Sherbrooke Substation. Reporting describes rotational-outage contingency planning and a planned overnight outage used to connect Summerside to a mobile transformer or transfer unit as an interim stabilization measure. Follow-up reporting indicated the planned outage executed without major issues but emphasized the city’s grid remained vulnerable until longer-term repairs and reinforcement.

  Why it matters
  This is a concrete example of how local utilities may run close to stability margins during repair periods.