35K Solar Devices Vulnerable to Potential Hijacking

Forescout Research (Vedere Labs) used Shodan to identify ~35,000 Internet-exposed solar devices across 42 vendors and documented nearly 50 vulnerabilities—many obvious and critical—that could allow attackers to hijack inverters, data loggers and gateways; researchers note most exposed devices are in Europe and Asia and cite prior misuse (≈800 SolarView Compact devices hijacked in Japan for bank theft). The report urges rapid patching or retirement of unpatchable devices, avoidance of Internet-exposed management interfaces (use VPNs), and adherence to NIST/DOE/CISA guidance to reduce risk.