Showing posts with label Security risks. Show all posts
Showing posts with label Security risks. Show all posts

Thursday, 5 June 2025

Ghost in the machine? Rogue communication devices found in Chinese inverters

 

By Reuters - May 14, 2025 @ 2:33pm

https://www.nst.com.my/business/corporate/2025/05/1215944/ghost-machine-rogue-communication-devices-found-chinese-inverters

US energy officials are reassessing the risk posed by Chinese-made devices that play a critical role in renewable energy infrastructure.


LONDON: US energy officials are reassessing the risk posed by Chinese-made devices that play a critical role in renewable energy infrastructure after unexplained communication equipment was found inside some of them, two people familiar with the matter said.

Power inverters, which are predominantly produced in China, are used throughout the world to connect solar panels and wind turbines to electricity grids. They are also found in batteries, heat pumps and electric vehicle chargers.

While inverters are built to allow remote access for updates and maintenance, the utility companies that use them typically install firewalls to prevent direct communication back to China.

However, rogue communication devices not listed in product documents have been found in some Chinese solar power inverters by US experts who strip down equipment hooked up to grids to check for security issues, the two people said.

Over the past nine months, undocumented communication devices, including cellular radios, have also been found in some batteries from multiple Chinese suppliers, one of them said.

Reuters was unable to determine how many solar power inverters and batteries they have looked at.

The rogue components provide additional, undocumented communication channels that could allow firewalls to be circumvented remotely, with potentially catastrophic consequences, the two people said.

Both declined to be named because they did not have permission to speak to the media.

"We know that China believes there is value in placing at least some elements of our core infrastructure at risk of destruction or disruption," said Mike Rogers, a former director of the US National Security Agency. "I think that the Chinese are, in part, hoping that the widespread use of inverters limits the options that the West has to deal with the security issue."

A spokesperson for the Chinese embassy in Washington said: "We oppose the generalisation of the concept of national security, distorting and smearing China's infrastructure achievements."

Using the rogue communication devices to skirt firewalls and switch off inverters remotely, or change their settings, could destabilise power grids, damage energy infrastructure, and trigger widespread blackouts, experts said.

"That effectively means there is a built-in way to physically destroy the grid," one of the people said,

The two people declined to name the Chinese manufacturers of the inverters and batteries with extra communication devices, nor say how many they had found in total.

The existence of the rogue devices has not previously been reported. The US government has not publicly acknowledged the discoveries.

Asked for comment, the US Department of Energy (DOE) said it continually assesses risk associated with emerging technologies and that there were significant challenges with manufacturers disclosing and documenting functionalities.

"While this functionality may not have malicious intent, it is critical for those procuring to have a full understanding of the capabilities of the products received," a spokesperson said.

Work is ongoing to address any gaps in disclosures through "Software Bill of Materials" - or inventories of all the components that make up a software application - and other contractual requirements, the spokesperson said.

TRUSTED EQUIPMENT

As US-China tensions escalate, the US and others are reassessing China's role in strategic infrastructure because of concerns about potential security vulnerabilities, two former government officials said.

In February, two US Senators introduced the Decoupling from Foreign Adversarial Battery Dependence Act, banning the Department of Homeland Security from purchasing batteries from some Chinese entities, starting October 2027, due to national security concerns.

The bill was referred to the Senate Committee on Homeland Security and Governmental Affairs on March 11 and has yet to be enacted.

It aims to prevent Homeland Security from procuring batteries from six Chinese companies Washington says are closely linked to the Chinese Communist Party: Contemporary Amperex Technology Company (CATL), BYD Company, Envision Energy, EVE Energy Company, Hithium Energy Storage Technology Company, and Gotion High-tech Company .

None of the companies responded to requests for comment.

Utilities are now preparing for similar bans on Chinese inverter manufacturers, three people with knowledge of the matter said.

Some utilities, including Florida's largest power supplier Florida Power & Light Company, are attempting to minimise the use of Chinese inverters by sourcing equipment from elsewhere, according to two people familiar with the matter. FPL did not respond to requests for comment.

The DOE spokesperson said: "As more domestic manufacturing takes hold, DOE is working across the federal government to strengthen US supply chains, providing additional opportunities to integrate trusted equipment into the power grid."

'CATASTROPHIC IMPLICATIONS'

Huawei is the world's largest supplier of inverters, accounting for 29 per cent of shipments globally in 2022, followed by Chinese peers Sungrow and Ginlong Solis, according to consultancy Wood Mackenzie.

German solar developer 1Komma5 said, however, that it avoids Huawei inverters, because of the brand's associations with security risks.

"Ten years ago, if you switched off the Chinese inverters, it would not have caused a dramatic thing to happen to European grids, but now the critical mass is much larger," 1Komma5 Chief Executive Philipp Schroeder said.

"China's dominance is becoming a bigger issue because of the growing renewables capacity on Western grids and the increased likelihood of a prolonged and serious confrontation between China and the West," he said.

Since 2019, the US has restricted Huawei's access to US technology, accusing the company of activities contrary to national security, which Huawei denies.

Chinese companies are required by law to cooperate with China's intelligence agencies, giving the government potential control over Chinese-made inverters connected to foreign grids, experts said.

While Huawei decided to leave the U.S. inverter market in 2019 - the year its 5G telecoms equipment was banned - it remains a dominant supplier elsewhere.

Huawei declined to comment.

In Europe, exercising control over just 3 to 4 gigawatts of energy could cause widespread disruption to electricity supplies, experts said.

The European Solar Manufacturing Council estimates over 200 GW of European solar power capacity is linked to inverters made in China - equivalent to more than 200 nuclear power plants.

At the end of last year, there was 338 GW of installed solar power in Europe, according to industry association SolarPower Europe.

"If you remotely control a large enough number of home solar inverters, and do something nefarious at once, that could have catastrophic implications to the grid for a prolonged period of time," said Uri Sadot, cyber security program director at Israeli inverter manufacturer SolarEdge.


https://www.nst.com.my/business/corporate/2025/05/1215944/ghost-machine-rogue-communication-devices-found-chinese-inverters

Monday, 3 April 2023

TikTok: Why do countries think Chinese tech firms are a security risk?

 US Congress members have grilled TikTok boss Shou Zi Chew over the the safety of the social media app.

The US has threatened to ban it completely if the company remains under Chinese ownership.

Many Western countries are also taking measures against other Chinese tech firms over security fears.


24 March 2023

What restrictions have been introduced against TikTok?

TikTok is a platform for creating and sharing short videos and is owned by the Chinese company ByteDance.

It was started in 2016, and has become the third most popular internet service in the world, with more than a billion active monthly users.

The app has been banned on government devices in Canada, Belgium, Denmark, New Zealand, Taiwan, the UK and the US.

The UK government has banned TikTok on the phones it gives its staff

The EU told its staff to remove the app from phones it has issued, and also recommended they remove it from private devices on which official apps are installed.

India has banned TikTok outright because of security concerns.

Afghanistan has also banned it to prevent young people from "being misled".

Why do countries think TikTok poses a security risk?

TikTok gathers the same type of user data as many other social media firms such as Facebook and Instagram.

This includes names, ages, phone numbers, email addresses and photos.

FBI director Chris Wray has pointed to China's 2017 National Intelligence Law, saying it requires companies "to do whatever the government wants them to do in terms of showing them information or serving as a tool for the Chinese government."

TikTok also has a tool which recommends video clips for users to watch, called the "For You" feed, which experts say is better designed than those used by Facebook or Youtube.

"TikTok has a more complex model in terms of showing content to its users," says Dr Maryam Mehrnezhad from the Department of Information Security at Royal Holloway, University of London. "This makes the spread of misinformation easier and its identification and detection more difficult."

Which other Chinese tech has been targeted?

Chinese companies specialising in 5G technology such as Huawei, ZTE and Hytera have been banned from installing equipment on networks in Australia, the US, Japan, India, and Canada.

The UK government has ordered equipment installed by Huawei to be removed from 5G networks by 2027.














Huawei has been blocked from installing equipment in many countries' 5G networks

The US and Dutch governments are restricting the export of semiconductors to China because of security fears over the country's development of supercomputing and AI technology.

The UK and Australian government have ordered Chinese-made security cameras to be removed from sensitive sites.

What is behind these bans?

Governments fear that 5G equipment installed by Chinese firms in foreign countries' networks contains "backdoors" through which data can be passed back to Beijing.

Through companies such as Hikvision, China is the world's largest producer of security cameras. It is thought that that these could also be secretly feeding intelligence to China.

"Why wouldn't they have put in backdoor access?" asks Prof Anderson. "Western countries have done that for years when they've built telephone networks around the world."



Countries like Australia and the UK are removing Chinese-made cameras from sensitive sites

There's no hard evidence that China is using its tech firms for espionage, says Jake Moore, global security advisor to ESET, an internet security firm.

However, he says: "There's a fear that firms like Huawei and TikTok have become so big that they could be hacking huge amounts of data and damaging national security.

"Governments are right to take precautions against it now rather than later."

What does China say about curbs on its tech firms?

China's foreign ministry has called the bans on TikTok and other tech firms "political theatre", saying the "US is overstretching national security concerns to suppress other countries' companies."

TikTok insists it gathers no more data than other social media apps, and is independent of the government.



In 2022, it admitted that some of its staff in China could access user data gathered in Europe, but it says that it is working on ways of keeping such information within Europe.

It also says that American users' data is nowadays processed through US servers, and does not go to China.

https://www.bbc.com/news/technology-65019279

Wednesday, 27 July 2022

Opinion: Chipping away at globalization is a smart move - MUST READ

 Opinion by Oren Cass

Intel CEO on why semiconductors are more important than energy
00:17/01:39



Oren Cass is the executive director at American Compass, a policy shop developing a new conservative economic agenda. The views expressed in this commentary are his own. View more opinion on CNN.

(CNN)Any legislation that manages to navigate Congress successfully is noteworthy these days, but the CHIPS Act, passed by the Senate Wednesday, represents an especially significant inflection point for the United States. We may finally be ready to do what it takes to support critical industries operating on our shores.

https://edition.cnn.com/2022/07/27/opinions/chips-act-smart-move-cass/index.html

Oren Cass
The bill which aims to restore American leadership in manufacturing advanced semiconductors, the cutting-edge computer chips in everything from smartphones to airplanes, was backed by a bipartisan vote (64 to 33). It provides semiconductor producers with more than $70 billion to build new chip factories, called foundries, in the US.
    The legislation also authorizes a $200 billion increase in funding over the next decade for scientific research to boost technological innovation. The bill now moves to the House of Representatives, which is expected to pass it soon.
    Since the Cold War ended, American policymakers have generally promoted globalization, arguing that it doesn't matter what goods get made where. Other countries have been determined to attract manufacturers and the investment and jobs they brought with them, and we did little to stop them from leaving, so off they went.
    The US lost millions of good manufacturing jobs, saw entire industries hollowed out and accumulated trillions of dollars in trade debt as we increased the imports that we bought from the rest of the world much faster than the exports we sold back.
    Even in advanced technology products, which should have been our strength, our advantage quickly vanished. In 1992, the US ran a trade surplus of nearly $60 billion making such products for the world (adjusted for inflation). By 2020, we ran a deficit of $188 billion, according to the US Department of Commerce.
    Semiconductors provide the quintessential example. American labs developed the transistor and integrated circuit in the middle of the 20th century and figured out how to print them on silicon, giving rise to Silicon Valley. The industry's leader, Intel, pushed the envelope on smaller, faster chips and dominated the market for the smallest and fastest ones.
    But then Taiwan and South Korea began making huge investments in, and providing generous subsidies for, their own semiconductor firms -- Taiwan Semiconductor Manufacturing Company (TSMC). Analysts estimate that, thanks mostly to these policies, building an advanced foundry in the United States can cost 50% more than in those East Asian countries.
    An aerial photo taken on July 18, 2022, shows the TSMC factory in Nanjing, East China's Jiangsu province.
    Meanwhile, as capital expenditures surged abroad, Intel opted to make relatively lower investments than its competitors, preferring to return cash to shareholders.
    Unsurprisingly, Intel no longer sets the standard. Advances in chip manufacturing require etching ever-smaller transistors on to silicon wafers. TSMC can produce chips with transistors just 5 nanometers (nm) wide, while Intel is stuck at 10nm and won't reach 7nm until next year.
    Pat Gelsinger, who took over as Intel's CEO last year, said "we had some missteps," and that "the strategy had become a little bit confused on the role that we're going to play in manufacturing for the long term... now we're leaning back into that with clarity, with clear urgency."
    Meanwhile, TSMC may soon be at 3nm. Just last month, Samsung began production of its own 3nm chips.
    Globally, the US share of semiconductor manufacturing has fallen by two-thirds since 1990, to 12%, and is still falling. Already lapped by other Asian competitors, the next threat comes from China, which has been making huge investments in the industry under its "Made in China 2025" strategy for achieving global leadership in key technologies.
    According to the Semiconductor Industry Association, "In 2019, all six of the new [foundries] that opened globally were outside the United States, with four being built in China, which is putting significant government dollars behind these new facilities."
    Better late than never, American policymakers have awakened to the threat posed by the loss of global leadership in such a vital technology, especially if an adversary like China takes the reins from the US. The chip shortages that emerged during the Covid-19 pandemic have further underscored the risks of relying on foreign supplies.
    Sounding the alarm last year, the National Security Commission on Artificial Intelligence reported, "Put simply: the U.S. supply chain for advanced chips is at risk without concerted government action. Rebuilding domestic chip manufacturing will be expensive, but the time to act is now. The United States should commit to a strategy to stay at least two generations ahead of China in state-of-the-art microelectronics and commit the funding and incentives to maintain multiple sources of cutting-edge microelectronics fabrication in the United States."
    The CHIPS Act does just that.
    Opponents have expressed concern that the program's funds could wind up in China -- it "subsidizes the construction of semiconductor factories in China," warns Kevin Roberts, president of the conservative Heritage Foundation. But this reflects a serious misunderstanding of how the bill works. Companies only receive public funds under agreement with the federal government to build domestic foundries. No new incentive exists to make investments in China.
    One might worry that a company would still make separate investments abroad, but of course that is an option that such a company already has today. And the bill includes so-called guardrails that do restrict recipients of federal funds from expanding operations in China.
    To receive funds, a company must agree that investments in China will be limited only to technologies several generations out of date. While some critics believe this restriction should be even tighter and permit work only on chips even further out of date, the CHIPS Act represents an improvement either way. It would create greater public incentives than have ever existed for building domestic foundries, and greater legal restrictions than have ever existed on building Chinese ones.
    Get our free weekly newsletter

    Sign up for CNN Opinion's newsletter.

    Join us on Twitter and Facebook

      The critics do have a point in this respect: America needs to get even tougher on China. That's not an argument against passing the CHIPS Act -- an inflection point marks the moment when a curve begins to change direction, not a complete reversal all at once. But it does highlight an opportunity for further progress in the coming year, restricting the technologies that companies can send to China and the investments they can make there.
      Republicans have been most vocal in raising the criticism that firms might invest in China, which marks a change from their historical reluctance to interfere with business investments and free trade. Hopefully they mean what they are saying and, if their party wins congressional power in November's mid-term elections, the CHIPS Act will be only act one.

      https://edition.cnn.com/2022/07/27/opinions/chips-act-smart-move-cass/index.html

      Most Recent Post

      Man charged for borrowing rare Chinese manuscripts from UCLA library, returning fakes

        Suspect Jeffrey Ying allegedly travelled to China after checking works out using several aliases Agence France-Presse Published: 12:11pm, ...

      Popular Posts - Last 30 days