{"id":182911,"date":"2026-01-30T04:17:00","date_gmt":"2026-01-30T09:17:00","guid":{"rendered":"https:\/\/testing.news-you-need.com\/index.php\/2026\/01\/30\/does-liberty-eclipse-simulates-ransomware-and-stealth-attacks-to-prepare-utilities-for-real-world-grid-cyber-threats\/"},"modified":"2026-01-30T04:45:09","modified_gmt":"2026-01-30T09:45:09","slug":"does-liberty-eclipse-simulates-ransomware-and-stealth-attacks-to-prepare-utilities-for-real-world-grid-cyber-threats","status":"publish","type":"post","link":"https:\/\/testing.news-you-need.com\/index.php\/2026\/01\/30\/does-liberty-eclipse-simulates-ransomware-and-stealth-attacks-to-prepare-utilities-for-real-world-grid-cyber-threats\/","title":{"rendered":"DOE\u2019s Liberty Eclipse simulates ransomware and stealth attacks to prepare utilities for real-world grid cyber threats"},"content":{"rendered":"

DOE\u2019s Liberty Eclipse simulates ransomware and stealth attacks to prepare utilities for real-world grid cyber threats<\/a><\/p>\n

https:\/\/industrialcyber.co\/utilities-energy-power-water-waste\/does-liberty-eclipse-simulates-ransomware-and-stealth-attacks-to-prepare-utilities-for-real-world-grid-cyber-threats\/<\/a><\/p>\n

Publish Date: 2026-01-30 04:17:00<\/a><\/p>\n

Source Domain: industrialcyber.co<\/a><\/p>\n

Author: <\/a><\/p>\n

Using an unordered list, summarize the following article with between 4 and 8 key points. <\/p>\n

The Department of Energy\u2019s Office of Cybersecurity, Energy Security, and Emergency Response brought utilities, industry experts, and government defenders together on Plum Island, New York, for the annual Liberty Eclipse exercise, a full-scale cyber training event designed to strengthen U.S. energy grid resilience. Using an isolated 840-acre grid that mirrors real utility environments, participants from power companies, national laboratories, and partner organizations tested their ability to detect, respond to, and recover from a range of simulated cyberattacks, from noisy intrusions and ransomware to stealthy, engineered compromise scenarios.\u00a0<\/p>\n

The exercise fosters collaboration across information technology, operational technology, and real-time operations teams and allows utility operators to refine tools, procedures, and cross-functional response plans in a realistic setting. With adversaries advancing in sophistication, Liberty Eclipse aims to build a professional \u2018sixth sense\u2019 among defenders, giving them the experience needed to confront and mitigate real cyber threats to critical electrical infrastructure.<\/p>\n

\u201cLiberty Eclipse allows utilities to operate in an environment that closely mirrors their own systems,\u201d Brian Marko, the exercise\u2019s director, said in a media statement. \u201cThis year, we hope utility teams learned how to be better prepared for the challenges of defending critical infrastructure in the real world.\u201d<\/p>\n

The comprehensive training program began as a 2018 Defense Advanced Research Projects Agency (DARPA) project addressing the military\u2019s reliance on the commercial power grid. DARPA\u2019s Black Start Exercise demonstrated the value of developing technology to restore the grid after a cyberattack. DOE then expanded this mission to include power utilities, especially those protecting critical infrastructure. The first full-scale Liberty Eclipse exercise was held in 2022.<\/p>\n

Months before the exercise, Daniel Hearn, a senior computer security researcher at the Idaho National Laboratory, led a red team consisting of utility and international partners and national lab researchers that designed attack scenarios based on current threat intelligence.<\/p>\n

\u201cLiberty Eclipse gives industry professionals a chance to experience real cyberattacks, using known techniques and methodologies from advanced actors, in a controlled environment,\u201d Hearn said.<\/p>\n

This year\u2019s exercise includes scenarios simulating real-world threats focused on various types of attacks with specific intentions and behaviors: low-skilled and noisy, criminal data theft, wanton disruption, and stealthy and skilled compromise with engineered effects.<\/p>\n

Utility participants help design and structure the island\u2019s grid to emulate their environments, from infrastructure to internal team dynamics, to procedures and response plans. During the exercise, they test their integrated security posture and the capabilities and limits of their tools and operational technology to detect cyberattacks.<\/p>\n

\u201cLiberty Eclipse enhanced my understanding of the collaboration required between information technology, operational technology, and real-time operations professionals,\u201d said Tom Huth, Principal at Energy Markets Cyber Incident Coordination at the Australian Energy Market Operator. \u201cThe exercise taught me how to effectively respond to modern cyber threats to electricity infrastructure.\u201d<\/p>\n

According to Mandi Peters, INL\u2019s Liberty Eclipse program manager, the exercise unites public and private cybersecurity experts, utility operators, and defenders of U.S. critical energy infrastructure like the National Guard and DOE hunt teams.\u201cThis collaboration allows us to \u2018practice like we fight\u2019 and advance research and development tools, techniques, and procedures that utilities implement in their operations and cyber protection teams use to refine their strategies,\u201d he added.<\/p>\n

The impact of the exercise extends far beyond the more than 300 in-person participants on the island, reaching remote teams and organizations involved throughout the five-day event and influencing broader grid defense practices across the sector. Unlike most exercises that are structured like a competition, Liberty Eclipse lets utilities learn in a collaborative environment by sharing knowledge and networking with industry participants and national laboratory experts.<\/p>\n

Utility participants are grouped into three cross-functional blue teams, using the island\u2019s standalone grid and dedicated communication system as a test bed. They work in security and control operations centers, responding to continuous cyberattacks that impact their energized substations\u2019 operations with power fluctuations, equipment stress, ransomware attacks, and living-off-the-land attacks with data exfiltration.<\/p>\n

These participants use the same tools and procedures deployed in their operational environments to detect attacks in real time or through forensic analysis, then respond to and recover from them. Other participants serve on hunt teams, where they refine and tune tools and workflows to improve their effectiveness in operational technology environments.<\/p>\n

Mike Typer, information systems manager at Cybersecurity Operations at the Los Angeles Department of Water and Power, participated for the first time this year. \u201cOur team found it to be immediately applicable to our day-to-day operations,\u201d said Typer. \u201cLiberty Eclipse is a unique event that plays a critical role in helping teams prepare and learn about the crucial role in defending the power grid.\u201d<\/p>\n

The exercise allows organizers to collect observations and data to help utilities evaluate their performance, infrastructure configurations and procedures, and to identify areas for improvement.<\/p>\n

U.S. utilities have largely averted severe cyberattacks affecting operations, but adversaries are developing more sophisticated and complex techniques. Liberty Eclipse provides an unpredictable, live-fire attack environment on a realistic power grid that trains operators to develop a professional \u2018sixth sense\u2019 to interrogate, analyze and respond to anomalies.<\/p>\n

\t\t\t\t\tAnna Ribeiro\t\t\t\t<\/p>\n

\t\t\t\t\tIndustrial Cyber News Editor. Anna Ribeiro is a freelance journalist with over 14 years of experience in the areas of security, data storage, virtualization and IoT.\t\t\t\t<\/p>\n

<\/p>\n","protected":false},"excerpt":{"rendered":"

DOE\u2019s Liberty Eclipse simulates ransomware and stealth attacks to prepare utilities for real-world grid cyber…<\/p>\n","protected":false},"author":1,"featured_media":182912,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/industrialcyber.co\/wp-content\/uploads\/2026\/01\/2026.01.30-DOEs-Liberty-Eclipse-simulates-ransomware-and-stealth-attacks-to-prepare-utilities-for-real-world-grid-cyber-threats.webp","fifu_image_alt":"","footnotes":""},"categories":[15],"tags":[33,24],"class_list":["post-182911","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-computer-security","tag-cybersecurity"],"_links":{"self":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/182911"}],"collection":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/comments?post=182911"}],"version-history":[{"count":1,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/182911\/revisions"}],"predecessor-version":[{"id":182913,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/182911\/revisions\/182913"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/media\/182912"}],"wp:attachment":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/media?parent=182911"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/categories?post=182911"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/tags?post=182911"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}