Washington announces offshore wind initiatives

Russian Utility Grid Cyberattacks reveal DHS findings on Dragonfly/Energetic Bear breaching control rooms and ICS/SCADA via vendor supply-chain spear-phishing, threatening blackouts and critical infrastructure across U.S. power utilities through stolen credentials and reconnaissance.

Key Points

State-backed ops breaching utilities via vendors to reach ICS/SCADA, risking grid disruption and control-room access.

✅ Spear-phishing and watering-hole attacks on vendor networks

✅ Stolen credentials used to reach isolated ICS/SCADA

✅ Potential to trigger localized blackouts and service disruptions

Hackers working for Russia were able to gain access to the control rooms of US electric utilities last year, allowing them to cause blackouts, federal officials tell the Wall Street Journal.

The hackers -- working for a state-sponsored group previously identified as Dragonfly or Energetic Bear -- broke into utilities' isolated networks by hacking networks belonging to third-party vendors that had relationships with the power companies, the Department of Homeland Security said in a press briefing on Monday.

Officials said the campaign had claimed hundreds of victims and is likely continuing, the Journal reported.

"They got to the point where they could have thrown switches" to disrupt the flow power, Jonathan Homer, chief of industrial-control-system analysis for DHS, told the Journal.

"While hundreds of energy and non-energy companies were targeted, the incident where they gained access to the industrial control system was a very small generation asset that would not have had any impact on the larger grid if taken offline," the DHS said in a statement Tuesday. "Over the course of the past year as we continued to investigate the activity, we learned additional information which would be helpful to industry in defending against this threat."

Organizations running the nation's energy, nuclear and other critical infrastructure have become frequent targets for cyberattacks in recent years due to their ability to cause immediate chaos, whether it's starting a blackout or blocking traffic signals. These systems are often vulnerable because of antiquated software and the high costs of upgrading infrastructure.

The report comes amid heightened tension between Russia and the US over cybersecurity, alongside US condemnation of power grid hacking in recent months. Earlier this month, US special counsel Robert Mueller filed charges against 12 Russian hackers tied to cyberattacks on the Democratic National Committee.

Hackers compromised US power utility companies' corporate networks with conventional approaches, such as spear-phishing emails and watering-hole attacks as seen in breaches at power plants across the US that target a specific group of users by infecting websites they're known to visit, the newspaper reported. After gaining access to vendor networks, hackers turned their attention to stealing credentials for access to the utility networks and familiarizing themselves with facility operations, officials said, according to the Journal.

Homeland Security didn't identify the victims, the newspaper reports, adding that some companies may not know they had been compromised because the attacks used legitimate credentials to gain access to the networks.

Cyberattacks on electrical systems aren't an academic matter. In 2016, Ukraine's grid was disrupted by cyberattacks attributed to Russia, which is engaged in territorial disputes with the country over eastern Ukraine and the Crimean peninsula. Russia has denied any involvement in targeting critical infrastructure.

President Donald Trump signed an executive order in May designed to bolster the United States' cybersecurity by protecting federal networks, critical infrastructure and the public online. One section of the order focuses on protecting the grid like electricity and water, as well as financial, health care and telecommunications systems.

The Department of Homeland Security didn't respond to a request for comment.

Related News

• Electricity Forum News

• Grid Technologies News

Canadian Industrial IoT Cybersecurity Standards aim to unify device security for utilities, smart grids, SCADA, and OT systems, aligning with NERC CIP, enabling certification, trust marks, compliance testing, and safer energy sector deployments.

Key Points

National standards to secure industrial IoT for utilities and grids, enabling certification and NERC CIP alignment.

✅ Aligns with NERC CIP and NIST frameworks for energy sector security

✅ Defines certification, testing tools, and a trusted device repository

✅ Enhances OT, SCADA, and smart grid resilience against cyber threats

The Canadian energy sector has been buying Internet-connected sensors for monitoring a range of activities in generating plants, distribution networks facing harsh weather risks and home smart meters for several years. However, so far industrial IoT device makers have been creating their own security standards for devices, leaving energy producers and utilities at their mercy.

The industry hopes to change that by creating national cybersecurity standards for industrial IoT devices, with the goal of improving its ability to predict, prevent, respond to and recover from cyber threats, such as emerging ransomware attacks across the grid.

To help, the federal government today announced an $818,000 grant support a CIO Strategy Council project oversee the setting of standards.

In an interview council executive director Keith Jansa said the money will help a three-year effort that will include holding a set of cross-country meetings with industry, government, academics and interest groups to create the standards, tools to be able to test devices against the standards and the development of product repository of IoT safe devices companies can consult before making purchases.

“The challenge is there are a number of these devices that will be coming online over the next few years,” Jansa said. “IoT devices are designed for convenience and not for security, so how do you ensure that a technology an electricity utility secures is in fact safeguarded against cyber threats? Currently, there is no associated trust mark or certification that gives confidence associated with these devices.”

He also said the council will work with the North American Electric Reliability Corporation (NERC), which sets North American-wide utility safety procedural standards and informs efforts on protecting the power grid across jurisdictions. The industrial IoT standards will be product standards.

According to Robert Wong, vice-president and CIO of Toronto Hydro, all the big provincial utilities are subject to adhering to NERC CIP standards which have requirements for both cyber and physical security. Ontario is different from most provinces in that it has local distribution companies — like Toronto Hydro — which buy electricity in bulk and resell it to customers.  These LDCs don’t own or operate critical infrastructure and therefore don’t have to follow the NERC CIP standards.

Regional reforms, such as regulatory changes in Atlantic Canada, aim to bring greener power options to the grid.

Electricity is considered around the world as one of a country’s critical national infrastructure. Threats to the grid can be used for ransom or by a country for political pressure. Ukraine had its power network knocked offline in 2015 and 2016 by what were believed to be Russian-linked attackers operating against utilities.

All the big provincial utilities operate “critical infrastructure” and are subject to adhering to NERC CIP (critical infrastructure protection) standards, which have requirements for both cyber and physical security, as similar compromises at U.S. electric utilities have highlighted recently.  There are audited on a regular basis for compliance and can face hefty fines if they fail to meet the requirements.  The LDCs in Ontario don’t own or operate “critical infrastructure” and therefore are not required to adopt NERC CIP standards (at least for now).

The CIO Strategy Council is a forum for chief information officers that is helping set standards in a number of areas. In January it announced a partnership with the Internet Society’s Canada Chapter to create standards of practice for IoT security for consumer devices. As part of the federal government’s updated national cybersecurity strategy it is also developing a national cybersecurity standard for small and medium-sized businesses. That strategy would allow SMBs to advertise to customers that they meet minimum security requirements.

“The security of Canadians and our critical infrastructure is paramount,” federal minister of natural resources Seamus O’Regan said in a statement with today’s announcement. “Cyber attacks are becoming more common and dangerous. That’s why we are supporting this innovative project to protect the Canadian electricity sector.”

The announcement was welcomed by Robert Wong, Toronto Hydro’s vice-president and CIO. “Any additional investment towards strengthening the safeguards against cyberattacks to Canada’s critical infrastructure is definitely good news.  From the perspective of the electricity sector, the convergence of IT and OT (operational technology) has been happening for some time now as the traditional electricity grid has been transforming into a Smart Grid with the introduction of smart meters, SCADA systems, electronic sensors and monitors, smart relays, intelligent automated switching capabilities, distributed energy resources, and storage technologies (batteries, flywheels, compressed air, etc.).

“In my experience, many OT device and system manufacturers and vendors are still lagging the traditional IT vendors in incorporating Security by Design philosophies and effective security features into their products.  This, in turn, creates greater risks and challenges for utilities to protecting their critical infrastructures and ensuring a reliable supply of electricity to its customers.”

The Ontario Energy Board, which regulates the industry in the province, has led an initiative for all utilities to adopt the National Institute of Standards and Technology (NIST) Cybersecurity Framework, along with the ES-C2M2 maturity and Privacy By Design models, he noted.  Toronto Hydro has been managing its cybersecurity practice in adherence to these standards, as the city addresses growing electricity needs as well, he said.

“Other jurisdictions, such as Israel, have invested heavily on a national level in developing its cybersecurity capabilities and are seen as global leaders.  I am confident that given the availability of talent, capabilities and resources in Canada (especially around the GTA) if we get strong support and leadership at a federal level we can also emerge as a leader in this area as well.”

Related News

• Electricity Forum News

• Grid Technologies News

Energy Storage for Microgrids enables renewables integration via ESS, boosting resilience and reliability while supporting solar PV and wind, innovative financing, and business models, with strong growth forecast across Asia-Pacific and North America.

Key Points

Systems that store energy in microgrids to integrate renewables, boost resilience, and optimize distributed power.

✅ Integrates solar PV and wind with stable, dispatchable output

✅ Reduces costs via new financing and service business models

✅ Expands reliable power for remote, grid-constrained regions

A new report from Navigant Research examines the global market for energy storage for microgrids (ESMG), providing an analysis of trends and market dynamics in the context of the evolving digital grid landscape, with forecasts for capacity and revenue that extend through 2026.

Interest in energy storage-enabled microgrids is growing alongside an increase in solar PV and wind deployments. Although not required for microgrids to operate, energy storage systems (ESSs) have emerged as an increasingly valuable component of distributed energy networks, including virtual power plants that coordinate distributed assets, because of their ability to effectively integrate renewable generation.

“There are several key drivers resulting in the growth of energy storage-enabled microgrids globally, including the desire to improve the resilience of power supply both for individual customers and the entire grid, the need to expand reliable electricity service to new areas, rising electricity prices, and innovations in business models and financing,” says Alex Eller, research analyst with Navigant Research. “Innovations in business models and financing will likely play a key role in the expansion of the ESMG market during the coming years.”

One example of microgrid deployment for resilience is the SDG&E microgrid in Ramona built to help communities prepare for peak wildfire season.

According to the report, the most successful companies in this industry will be those that can unlock the potential of new business models to reduce the risk and upfront costs to customers. This is particularly true in Asia Pacific and North America, which are projected to be the largest regional markets for new ESMG capacity by far, a trend underscored by California's push for grid-scale batteries to stabilize the grid.

The report, “Market Data: Energy Storage for Microgrids,” outlines the key market drivers and barriers within the global ESMG market. The study provides an analysis of specific trends, including evolving grid edge trends, and market dynamics for each major world region to illustrate how different markets are taking shape. Global ESMG forecasts for capacity and revenue, segmented by region, technology, and market segment, extend through 2026. The report also briefly examines the major technology issues related to ESSs for microgrids.

Google made energy storage news recently when its parent company Alphabet announced it is hoping to revolutionize renewable energy storage using vats of salt and antifreeze. Alphabet’s secretive research lab, simply named “X,” is developing a system for storing renewable energy that would otherwise be wasted. The project, named “Malta,” is hoping its energy storage systems “has the potential to last longer than lithium-ion batteries and compete on price with new hydroelectric plants and other existing clean energy storage methods, according to X executives and researchers,” reports Bloomberg.

Related News

• Electricity Forum News

• Grid Technologies News

Affordable Clean Energy Rule Lawsuit pits EPA and coal industry allies against health groups over Clean Power Plan repeal, greenhouse gas emissions standards, climate change, public health, and state authority before the D.C. Circuit.

Key Points

A legal fight over EPA's ACE rule and CPP repeal, weighing emissions policy, state authority, climate, and public health.

✅ Challenges repeal of Clean Power Plan and adoption of ACE.

✅ EPA backed by coal, utilities; health groups seek stricter limits.

✅ D.C. Circuit to review emissions authority and state roles.

The largest trade association representing coal interests in the country has joined other business and electric utility groups in siding with the EPA in a lawsuit challenging the Trump administration's repeal of the Clean Power Plan.

The suit -- filed by the American Lung Association and the American Public Health Association -- seeks to force the U.S. Environmental Protection Agency to drop a new rule-making process that critics claim would allow higher levels of greenhouse gas emissions, further contributing to the climate crisis and negatively impacting public health.

The new rule, which the Trump administration calls the "Affordable Clean Energy rule" (ACE), "would replace the 2015 Clean Power Plan, which EPA has proposed to repeal because it exceeded EPA's authority. The Clean Power Plan was stayed by the U.S. Supreme Court and has never gone into effect," according to an EPA statement.

EPA has also moved to rewrite wastewater limits for coal power plants, signaling a broader rollback of related environmental requirements.

America's Power -- formerly the American Coalition for Clean Coal Electricity -- the U.S. Chamber of Commerce, the National Mining Association, and the National Rural Electric Cooperative Association have filed motions seeking to join the lawsuit. The U.S. Court of Appeals for the District of Columbia Circuit has not yet responded to the motion.

Separately, energy groups warned that President Trump and Energy Secretary Rick Perry were rushing major changes to electricity pricing that could disrupt markets.

"In this rule, the EPA has accomplished what eluded the prior administration: providing a clear, legal pathway to reduce emissions while preserving states' authority over their own grids," Hal Quinn, president and chief executive officer of the mining association, said when the new rule was released last month. "ACE replaces a proposal that was so extreme that the Supreme Court issued an unprecedented stay of the proposal, having recognized the economic havoc the mere suggestion of such overreach was causing in the nation's power grid."

Around the same time, a coal industry CEO blasted a federal agency's decision on the power grid as harmful to reliability.

The trade and business groups have argued that the Clean Power Plan, set by the Obama administration, was an overreach of federal power. Finalized in 2015, the plan was President Obama's signature policy on climate change, rooted in compliance with the Paris Climate Treaty. It would have set state limits on emissions from existing power plants but gave wide latitude for meeting goals, such as allowing plant operators to switch from coal to other electric generating sources to meet targets.

Former EPA Administrator Scott Pruitt argued that the rule exceeded federal statutory limits by imposing "outside the fence" regulations on coal-fired plants instead of regulating "inside the fence" operations that can improve efficiency.

The Clean Power Plan set a goal of reducing carbon emissions from power generators by 32 percent by the year 2030. An analysis from the Rhodium Group found that had states taken full advantage of the CPP's flexibility, emissions would have been reduced by as much as 72 million metric tons per year on average. Still, even absent federal mandates, the group noted that states are taking it upon themselves to enact emission-reducing plans based on market forces.

In its motion, America's Power argues the EPA "acknowledged that the [Best System of Emission Reduction] for a source category must be 'limited to measures that can be implemented ... by the sources themselves.'" If plants couldn't take action, compliance with the new rule would require the owners or operators to buy emission rate credits that would increase investment in electricity from gas-fired or renewable sources. The increase in operating costs plus federal efforts to shift power generation to other sources of energy, thereby increasing costs, would eventually force the coal-fired plants out of business.

In related proceedings, renewable energy advocates told FERC that a DOE proposal to subsidize coal and nuclear plants was unsupported by the record, highlighting concerns about market distortions.

"While we are confident that EPA will prevail in the courts, we also want to help EPA defend the new rule against others who prefer extreme regulation," said Michelle Bloodworth, president and CEO of America's Power.

"Extreme regulation" to one group is environmental and health protections to another, though.

Howard A. Learner, executive director of the Environmental Law & Policy Center of the Midwest, defended the Clean Power Plan in an opinion piece published in June.

"The Midwest still produces more electricity from coal plants than any other region of the country, and Midwesterners bear the full range of pollution harms to public health, the Great Lakes, and overall environmental quality," Learner wrote. "The new [Affordable Clean Energy] Rule is a misguided policy, moves our nation backward in solving climate change problems, and misses opportunities for economic growth and innovation in the global shift to renewable energy. If not reversed by the courts, as it should be, the next administration will have the challenge of doing the right thing for public health, the climate and our clean energy future."

When it initially filed its lawsuit against the Trump administration's Affordable Clean Energy Rule, the American Lung Association accused the EPA of "abdicat[ing] its legal duties and obligations to protect public health." It also referred to the new rule as "dangerous."

Related News

• Electricity Forum News

• Energy Policy News

Canada Clean Electricity Regulations allow flexible, technology-neutral pathways to a 2035 net-zero grid, permitting limited natural gas with carbon capture, strict emissions standards, and exemptions for emergencies and peak demand across provinces and territories.

Key Points

Federal draft rules for a 2035 net-zero grid, allowing limited gas with CCS under strict performance and compliance standards.

✅ Performance cap: 30 tCO2 per GWh annually for gas plants

✅ CCS must sequester 95% of emissions to comply

✅ Emergency and peak demand exemptions permitted

After facing pushback from Alberta and Saskatchewan, and amid looming power challenges nationwide, Canada's draft net-zero electricity regulations — released today — will permit some natural gas power generation. 

Environment Minister Steven Guilbeault released Ottawa's proposed Clean Electricity Regulations on Thursday.

Provinces and territories will have a minimum 75-day window to comment on the draft regulations. The final rules are intended to pave the way to a net-zero power grid in Canada, aligning with 2035 clean electricity goals established nationally. 

Calling the regulations "technology neutral," Guilbeault said the federal government believes there's enough flexibility to accommodate the different energy needs of Canada's diverse provinces and territories, including how Ontario is embracing clean power in its planning. 

"What we're talking about is not a fossil fuel-free grid by 2035; it's a net zero grid by 2035," Guilbeault said. 

"We understand there will be some fossil fuels remaining … but we're working to minimize those, and the fossil fuels that will be used in 2035 will have to comply with rigorous environmental and emission standards," he added. 

Some analysts argue that scrapping coal-fired electricity can be costly and ineffective, underscoring the trade-offs in transition planning.

While non-emitting sources of electricity — hydroelectricity, wind and solar and nuclear — should not have any issues complying with the regulations, natural gas plants will have to meet specific criteria.

Those operations, the government said, will need to emit the equivalent of 30 tonnes of carbon dioxide per gigawatt hour or less annually to help balance demand and emissions across the grid.

Federal officials said existing natural gas power plants could comply with that performance standard with the help of carbon capture and storage systems, which would be required to sequester 95 per cent of their emissions.

"In other words, it's achievable, and it is achievable by existing technology," said a government official speaking to reporters Thursday on background and not for attribution.

The regulations will also allow a certain level of natural gas power production without the need to capture emissions. Capturing emissions will be exempted during emergencies and peak periods when renewables cannot keep up with demand. 

Some newer plants might not have to comply with the rules until the 2040s, because the regulations apply to plants 20 years after they are commissioned, which dovetails with net-zero by 2050 commitments from electricity associations. 

The two-decade grace period does not apply to plants that open after the regulations are expected to be finalized in 2025.

Related News

• Electricity Forum News

• Power Generation News

Ukraine-ENTSO-E Grid Synchronization links Ukraine and Moldova to the European grid via secure interconnection, matching frequency for stability, resilience, and energy security, enabling cross-border support, islanding recovery, and coordinated load balancing during wartime disruptions.

Key Points

Rapid alignment of Ukraine and Moldova into the European grid to enable secure interconnection and system stability.

✅ Matches 50 Hz frequency across interconnected systems

✅ Enables cross-border support and electricity trading

✅ Improves resilience, stability, and energy security

On February 24 Ukraine’s electric grid operator disconnected the country’s power system from the larger Russian-operated network to which it had always been linked. The long-planned disconnection was meant to be a 72-hour trial proving that Ukraine could operate on its own and to protect electricity supply before winter as contingencies were tested. The test was a requirement for eventually linking with the European grid, which Ukraine had been working toward since 2017. But four hours after the exercise started, Russia invaded.

Ukraine’s connection to Europe—which was not supposed to occur until 2023—became urgent, and engineers aimed to safely achieve it in just a matter of weeks. On March 16 they reached the key milestone of synchronizing the two systems. It was “a year’s work in two weeks,” according to a statement by Kadri Simson, the European Union commissioner for energy. That is unusual in this field. “For [power grid operators] to move this quickly and with such agility is unprecedented,” says Paul Deane, an energy policy researcher at the University College Cork in Ireland. “No power system has ever synchronized this quickly before.”

Ukraine initiated the process of joining Europe’s grid in 2005 and began working toward that goal in earnest in 2017, as did Moldova. It was part of an ongoing effort to align with Europe, as seen in the Baltic states’ disconnection from the Russian grid, and decrease reliance on Russia, which had repeatedly threatened Ukraine’s sovereignty. “Ukraine simply wanted to decouple from Russian dominance in every sense of the word, and the grid is part of that,” says Suriya Jayanti, an Eastern European policy expert and former U.S. diplomat who served as energy chief at the U.S. embassy in Kyiv from 2018 to 2020.

After the late February trial period, Ukrenergo, the Ukrainian grid operator, had intended to temporarily rejoin the system that powers Russia and Belarus. But the Russian invasion made that untenable. “That left Ukraine in isolation mode, which would be incredibly dangerous from a power supply perspective,” Jayanti says. “It means that there’s nowhere for Ukraine to import electricity from. It’s an orphan.” That was a particularly precarious situation given Russian attacks on key energy infrastructure such as the Zaporizhzhia nuclear power plant and ongoing strikes on Ukraine’s power grid that posed continuing risks. (According to Jayanti, Ukraine’s grid was ultimately able to run alone for as long as it did because power demand dropped by about a third as Ukrainians fled the country.)

Three days after the invasion, Ukrenergo sent a letter to the European Network of Transmission System Operators for Electricity (ENTSO-E) requesting authorization to connect to the European grid early. Moldelectrica, the Moldovan operator, made the same request the following day. While European operators wanted to support Ukraine, they had to protect their own grids, amid renewed focus on protecting the U.S. power grid from Russian hacking, so the emergency connection process had to be done carefully. “Utilities and system operators are notoriously risk-averse because the job is to keep the lights on, to keep everyone safe,” says Laura Mehigan, an energy researcher at University College Cork.

An electric grid is a network of power-generating sources and transmission infrastructure that produces electricity and carries it from places such as power plants, wind farms and solar arrays to houses, hospitals and public transit systems. “You can’t just experiment with a power system and hope that it works,” Deane says. Getting power where it is it needed when it is needed is an intricate process, and there is little room for error, as incidents involving Russian hackers targeting U.S. utilities have highlighted for operators worldwide.

Crucial to this mission is grid interconnection. Linked systems can share electricity across vast areas, often using HVDC technology, so that a surplus of energy generated in one location can meet demand in another. “More interconnection means we can move power around more quickly, more efficiently, more cost effectively and take advantage of low-carbon or zero-carbon power sources,” says James Glynn, a senior research scholar at the Center on Global Energy Policy at Columbia University. But connecting these massive networks with many moving parts is no small order.

One of the primary challenges of interconnecting grids is synchronizing them, which is what Ukrenergo, Moldelectrica and ENTSO-E accomplished last week. Synchronization is essential for sharing electricity. The task involves aligning the frequencies of every energy-generation facility in the connecting systems. Frequency is like the heartbeat of the electric grid. Across Europe, energy-generating turbines spin 50 times per second in near-perfect unison, and when disputes disrupt that balance, slow clocks across Europe can result, reminding operators of the stakes. For Ukraine and Moldova to join in, their systems had to be adjusted to match that rhythm. “We can’t stop the power system for an hour and then try to synchronize,” Deane says. “This has to be done while the system is operating.” It is like jumping onto a moving train or a spinning ride at the playground: the train or ride is not stopping, so you had better time the jump perfectly.

Related News

• Electricity Forum News

• Grid Technologies News