SaiFlow's Blog

Featured

EV Charging Data & Firmware Risk Report 2026

One exposed file-service login rarely stays with one company. SaiFlow studied EV-charging file services and found shared passwords, secrets in logs and firmware open to tampering.

Latest insights and industry updates

image of a traffic control center (for a mobility and transportation)

SaiFlow and Palo Alto Networks Partner to Deliver Zero Trust Secure Remote Access for Distributed Energy OT Networks

SaiFlow and Palo Alto Networks have partnered to deliver secure, zero trust remote access purpose-built for distributed energy OT sites - unifying JIT technician and vendor access, privileged session brokering, and zero trust network connectivity into a single workflow.
image of a traffic control center (for a mobility and transportation)

From Unauthenticated API to Grid Risk: A Hybrid Inverter Vulnerability Explained

A single misconfigured listening socket on FIMER's React 2 hybrid inverter lets an unauthenticated attacker send commands straight to the Supervisor MCU that governs the device's grid protections.
image of a traffic control center (for a mobility and transportation)

Invisible and Everywhere: Why Smart Meters Are the Next Frontier of Energy Cyberattacks

With over 1.1 billion smart meters deployed worldwide and more than 2 billion expected by 2030, these increasingly connected grid assets are becoming a growing cybersecurity concern, requiring energy-aware protection against emerging threats.
image of a traffic control center (for a mobility and transportation)

RCE by Design: When Firmware Updates Become the Attack

SaiFlow's research uncovered an undocumented firmware update mechanism in XCharge C6 chargers that relies solely on attacker-controlled MD5 validation and executes embedded scripts as root, effectively enabling remote code execution through malicious firmware delivered via compromised servers, man-in-the-middle attacks, or CSMS compromise.
image of a traffic control center (for a mobility and transportation)

The Hidden CCS2 Attack Surface on EV Chargers

The EV charging industry has well-established security standards. OCPP provides clear guidelines for securing the communication channel between EV Chargers and the Charging Station Management System. While the industry has focused on securing the backend communication, the attack surface exposed through the CCS2 charging plug remains largely untested.
image of a traffic control center (for a mobility and transportation)

Plug and Pwn: The Sound of Compromised EV Charger

A malicious EV connecting to the CCS2 charging plug exploits SLAC protocol to compromise XCharge C6 and manipulate its power and cooling system controls