Overview
On July 17, 2025, SunSpec Alliance hosted a critical webinar addressing cybersecurity threats facing solar energy systems and exploring innovative strategies for enhancing grid resilience. Moderated by Dylan Tansy, Executive Director of the SunSpec Alliance, the session featured insights from industry experts including Dr. Paul Stockton, Jay Johnson (CTO of DERSec), and Tom Tansy (CEO of DERSec). Discussions emphasized the substantial cybersecurity vulnerabilities affecting nearly half of global solar production, exploring real-world scenarios involving compromised cloud infrastructures, insecure APIs, and malicious firmware updates. Experts highlighted essential cybersecurity certifications and regulatory frameworks needed to address these threats, such as NIST 2 and the Cyber Resilience Act.
Further discussions centered around leveraging Distributed Energy Resources (DERs) to bolster national security, emphasizing the benefits of microgrids, decentralized power restoration, and strategic dispersion of critical resources. The webinar also tackled supply chain vulnerabilities, particularly the risks associated with dependence on Chinese-manufactured solar equipment, advocating phased implementation of mandatory cybersecurity standards through product whitelisting and interconnection agreements. Panelists stressed shared responsibility among utilities, manufacturers, and end-users, urging comprehensive defense strategies to protect communication networks, manage emerging AI-driven DER management systems, and mitigate threats from rogue devices.
