Hackers Can Manipulate Internet-Based Solar Panel Systems to Execute Attacks in Minutes

The report details how exposed Modbus/TCP (port 502) string-monitoring boxes in solar farms can be remotely discovered and manipulated—using Nmap, mbpoll/modbus-cli and simple register writes—to rapidly switch PV strings off, disrupt power production, and stress inverters; it warns that AI-driven automation vastly increases the scale and speed of such attacks.