Every single time a substation goes dark, the panic machine whirs into motion. Journalists reach for the word sabotage before the smoke clears. Politicians stand in front of flashing lights, furrow their brows, and warn about shadowy actors targeting our critical infrastructure. It is a comforting narrative. It turns a mundane engineering failure into a geopolitical thriller. It allows operators to throw their hands up and blame a phantom saboteur rather than own up to decades of deferred maintenance, brittle architectures, and sheer institutional laziness.
I have spent the better part of twenty years auditing energy grids across Europe and North America. I have walked through security perimeters that could be breached by a determined teenager with wire cutters, and I have looked at control room logs where critical warnings were routinely muted because the system suffered from alarm fatigue. When two power substations drop offline in Germany, the lazy consensus immediately screams hybrid warfare. Nobody wants to look at the relay settings. Nobody wants to audit the firmware supply chain. Nobody wants to admit that our multi-billion-dollar energy networks are resting on software and hardware infrastructure that looks like a patched-together high school science project.
Let us dismantle the phantom threat narrative right now.
The Comforting Illusion of Foreign Interference
When authorities announce they are investigating suspected sabotage, they are buying themselves time. An investigation into malicious actors takes months, keeps the public guessing, and most importantly, shifts liability away from the asset owners and grid operators. If a hostile state actor blew up your transformer, you are a victim of geopolitical aggression. If your transformer cooked itself because a twenty-year-old analog protection relay failed to trip during a thermal overload, you are guilty of negligence.
The incentives are entirely skewed toward finding an external boogeyman.
Consider the physical reality of a high-voltage substation. They are not underground bunkers sealed in titanium. They are sprawling yards filled with porcelain insulators, copper windings, sulfur hexafluoride gas breakers, and miles of control cabling. They are designed to withstand weather, lightning strikes, and standard operational surges. They are not, and never have been, designed to withstand a determined military assault, because if a military force wants to take out a substation, they do not need covert saboteurs with bolt cutters. They use a cruise missile or an artillery shell. If a substation goes down quietly without a blast crater, look at the engineering logs, not the geopolitical threat matrix.
The obsession with hybrid warfare blinds us to the actual enemy: entropy combined with bureaucracy.
The Software Supply Chain Rot Nobody Talks About
We traded analog reliability for digital efficiency over the last two decades, and we did it on the cheap. Modern substations are controlled by Intelligent Electronic Devices running proprietary firmware that few people inside the utility actually understand. These boxes talk to SCADA systems over communication protocols designed back when cybersecurity meant locking the control room door.
Imagine a scenario where a routine firmware patch pushed by a third-party vendor introduces a subtle memory leak, causing a logic loop that trips breakers out of sequence. To an operator watching screens light up red, it looks like a coordinated cyberattack. To the media, it looks like sabotage. In reality, it is just poor quality assurance in a sprawling supply chain where the lowest bidder writes the code that keeps the lights on.
I have seen utility executives foam at the mouth over zero-day exploits while their internal networks still use default administrative passwords on their engineering workstations. They spend millions on perimeter defense theater while ignoring the fact that their substation automation systems are wide open to anyone with physical access to an unsecured Ethernet port behind a rusted chain-link fence.
When disruption strikes, the knee-jerk assumption of sabotage protects the vendor and the executive suite. It creates a shroud of national security secrecy that shields incompetent procurement policies from public scrutiny.
Complexity Is Not Resilience
The green energy transition has injected a massive dose of operational instability into the grid. Decentralized generation, intermittent solar feeds, and wind farms swinging from zero to full output in minutes mean that legacy substations are being asked to handle power flows they were never engineered to manage.
Grid operators talk about smart grids as if adding the word smart solves the laws of physics. A smart grid is simply a more complex grid, and complexity is the mortal enemy of reliability. Every new communication layer, every automated switching algorithm, and every cloud-connected monitoring tool introduces a new vector for catastrophic failure.
When two substations fail close together temporally, the first instinct is to look for a coordinated attack pattern. The second, more rational instinct should be to look at the cascading load profiles. When one node trips due to thermal stress or equipment fatigue, the surrounding nodes automatically absorb the displaced load. If those neighboring nodes are already operating near their safety margins, they trip in sympathy. It looks like a coordinated strike. It is actually just a domino effect born of a grid running too close to the edge.
We have engineered out all the safety margins in the name of efficiency and cost reduction. Every transformer is loaded to its thermal limit. Every line is pushed to maximum thermal capacity. When you run a complex physical system at 99 percent capacity with zero headroom, you do not need saboteurs to bring it down. You just need a slight gust of wind, a minor voltage fluctuation, or a tired technician missing a warning flag.
What Actually Needs to Fix
Stop calling every unexplained outage sabotage until the physical evidence forces you to. That is the first rule of grid hygiene.
We need to radically rethink how we build and maintain critical infrastructure.
First, we must ruthlessly simplify. The rush to digitize every square inch of the grid has created massive attack surfaces for both digital intruders and operational errors. If a control function does not strictly need to be connected to the wider network, rip out the network cable. Air-gapping is not a relic of the past; it is the only reliable defense against systemic cascading failures.
Second, we need to bring engineering competence back to the C-suite. Too many energy companies are run by financial engineers who view maintenance budgets as cost centers to be slashed ahead of earnings reports. Deferred maintenance is not saving money; it is borrowing against a future catastrophe with exorbitant interest rates. When an aging breaker fails because nobody budgeted for preventative servicing, the ensuing blackout costs the economy a thousand times what the maintenance would have cost.
Third, national security agencies need to stop playing along with the sabotage narrative when the root cause is structural rot. By giving utilities a convenient out, we guarantee that the underlying vulnerabilities will remain unpatched.
The lights are flickering not because hostile agents are lurking behind every transformer, but because we have built a fragile, hyper-connected, over-leveraged energy machine and expected it to run on luck and good intentions.
Stop looking for shadows. Fix the code, replace the aging iron, and give the engineers back the keys to the grid.
