DNP3 is a technology platform tracked across 11 threat clusters and 9 intelligence report mentions on ThreatCluster. First observed November 3, 2025; most recent activity July 9, 2026.
DNP3 is a widely used OT communication protocol stack for SCADA/ICS, enabling master-outstation telemetry and control over serial or IP networks, commonly found in electric utilities and manufacturing. Its cybersecurity significance stems from its prevalence in critical infrastructure and historically limited default security features (e.g., limited authentication/encryption in legacy deployments), making it a notable attack surface for disrupting power grids and industrial operations.
A report reveals that 179 internet-exposed industrial control systems (ICS) using the Modbus protocol are vulnerable across 20 countries, with the majority located in the U.S., Sweden, and Turkey. The Modbus protocol…
PacketViper has highlighted significant vulnerabilities in industrial protocols like Modbus, which lack authentication and authorization, making them susceptible to unauthorized commands. These protocols are widely used…
In late December 2025, a cyber attack impacted 30 solar plants in Poland, primarily targeting substation equipment with wiper malware, while inverters remained unaffected. The attack highlighted vulnerabilities in the…
As renewable energy plants increasingly rely on digital technologies, they face significant cybersecurity threats. Attackers are targeting operational disruptions rather than just data theft, complicating traditional…
Electric power infrastructure is increasingly interconnected, integrating operational technology (OT) and enterprise IT systems, which raises cybersecurity risks. Attackers often exploit these connections to move…
In late April, a significant power outage impacted Spain, Portugal, and parts of southwestern France, leaving tens of millions without electricity for hours. The outage caused widespread disruptions, including halted…
On March 19, 2026, Panasonic announced a cybersecurity monitoring trial for a grid-scale Battery Energy Storage System (BESS) facility in Japan, in collaboration with ITOCHU Corporation. The trial aims to evaluate the…
A report by Trellix indicates that operational technology (OT) attacks have significantly increased, with the manufacturing sector experiencing 42% of these incidents. The report, covering data from April to September…
Dragos has identified three new operational technology (OT) threat groups—Azurite, Pyroxene, and Sylvanite—marking a shift from reconnaissance to real-world disruption of industrial processes. The report indicates that…
In late April, a significant power outage occurred across Spain, Portugal, and parts of southwestern France, impacting tens of millions of residents. The outage resulted in cities losing electricity for hours, halting…