Now imaging the amplitude of a deliberate attack not to personal domestic p.v. productions but en-masse against the grid: most hybrid systems also can inject, p.v. and eventual batteries can inject all together, eventually ignoring grid frequency burst. So far probably those systems are not so common do generate widespread damage, but once they'll be spread it would be easy to generate a large scale blackouts.
Just to say that no proprietary devices should be ever allowed to have remote connections, FLOSS must be mandatory from the early stage of a project to allow third party inspect the codebase not starting with a gazillion SLoC, being de facto unable to understand them, instead of starting from the first SLoC following at the project evolutionary speed.
Nowadays it start to be again damn easy to plan any kind of "unexpected logic" in gazillion of devices, potentially at State intelligence level, from cars to energy systems, TLCs active devices, ... not a new thing at all, but easy enough to be dangerous enough to MANDATE FLOSS if those who care of a nation security have at least an idea of the current role of IT in a society and it's enormous mean attack surface.
Here’s a bit of a counterpoint to this fear; Ukraine and Russia have been in a high intensity war for two and a half years now and Russia is a leading cyber-offense power, yet Russia is resorting to flinging long range missiles at Ukrainian power infrastructure rather than cyberattacks, that suggests to me that cyber warfare is overhyped at least as technology currently stands.
Most Ukraine and Russian infra came from Soviet time, I doubt they have much digital attack surface... Most war episodes reported are similar to WWI and WWII combats, so again not much attack surface.
But do not think about an actual war on the ground, just try to image the damage you can give to another country let's say creating a cascade blackouts, than a e-payments system one and so on. Cyber warfare happen generally aside/before a "classic" war, not much during it on the frontline.
Just to say that no proprietary devices should be ever allowed to have remote connections, FLOSS must be mandatory from the early stage of a project to allow third party inspect the codebase not starting with a gazillion SLoC, being de facto unable to understand them, instead of starting from the first SLoC following at the project evolutionary speed.
Nowadays it start to be again damn easy to plan any kind of "unexpected logic" in gazillion of devices, potentially at State intelligence level, from cars to energy systems, TLCs active devices, ... not a new thing at all, but easy enough to be dangerous enough to MANDATE FLOSS if those who care of a nation security have at least an idea of the current role of IT in a society and it's enormous mean attack surface.