The power grid runs on decades-old devices — and attackers know it

The report explains how modernization of the electrical grid — including rooftop solar, EVs, battery storage and centralized monitoring — has introduced cybersecurity risks because legacy OT devices were designed for isolated, point-to-point use and often lack authentication, encryption, and segmentation. It highlights the difficulty and cost of replacing long-lived OT equipment and stresses a cultural divide between OT and IT teams that complicates responsibility for securing the increasingly converged network.