North American Utilities: Are They Secure Against Advanced Cyber Attacks?

Last month, independent security researchers ESET and Dragos disclosed a highly sophisticated Industrial Control Systems (ICS) attack platform, known as CRASHOVERRIDE (or Industroyer). The same malware was used in 2016 to cripple the Ukrainian electric grid.

What the 2016 Ukraine Attack Reveals

CRASHOVERRIDE targeted an electric transmission station near Kyiv, overwriting firmware on critical devices at 16 substations and leaving them unresponsive to remote commands. The attack knocked out power for 80,000 customers for six hours during a cold snap and forced operators to manually control breakers. Though the intrusion lasted only an hour, experts warn it was likely a proof‑of‑concept rather than a full deployment, indicating that more complex attacks may be on the horizon. The Kyiv incident is only the second known case of malicious code disrupting physical systems—Stuxnet, used in 2009, was the first.

See also: How the new age of digital transformation is affecting utilities.

Full Spectrum’s Private Broadband Solution

American company Full Spectrum Inc. has developed a private broadband cellular network that can protect utilities from the kind of attacks seen in Ukraine and beyond. Their network radios create wide‑area intelligence grids for smart‑grid, smart‑pipe, smart‑field, and other mission‑critical systems that rely on Internet Protocol connectivity.

• Coverage: One base station can span up to 8,000 km², compared to 80 km² for 4G and 8 km² for 5G.
• Technology: Uses licensed VHF and UHF frequencies with high‑power radios at both base and remote sites.
• Adaptability: Supports multiple licensed channels and dynamic channel sizing—a feature unique to Full Spectrum’s hardware.
• Industry endorsement: The Electric Power Research Institute (EPRI) has proposed adopting the technology as a global wireless standard for industrial networks.

Full Spectrum’s solution enables utilities to own, operate, and control a network that can stay entirely off the public Internet—or switch to a secure, limited‑time connection when necessary—providing an extra layer of security for critical assets.

Why Private Networks Matter for Cyber Resilience

Malware such as CRASHOVERRIDE can directly manipulate substation switches, circuit breakers, and other key components by exploiting common industrial protocols. Attackers may gain access through a variety of vectors—removable media, vendor‑supplied software, or other means. Physical isolation combined with a private digital network dramatically reduces exposure and speeds recovery.

Public‑network disruptions—like the 2009 Bay Area fiber cuts—highlight the vulnerability of utilities that rely solely on commercial internet providers. A private network ensures continuity even if the public backbone is compromised or jammed.

Deploying the Solution Across North America

Full Spectrum will launch its first private network service in the Metropolitan New York Area, covering up to 52,000 km² and handling IP traffic without ever touching the public Internet. A second deployment will follow in the San Francisco Bay Area.

In the long term, the company envisions a nationwide private network that supports autonomous vehicle traffic, perimeter security sensors, radiation detection, and other mission‑critical data flows.

Mass adoption of this technology could revolutionize reliability, efficiency, and the replacement of aging infrastructure across North America’s utility sector.