KG 🧙‍♀️ 2 Please explain the content of the blackout attack announced by the UK. Gemini 📕 The UK government, the National Cyber Security Centre (NCSC), the National Energy System Operator (NESO), and other entities jointly announced and issued warnings between October and November 2026 regarding a potential “blackout” and cyberattack. The content primarily consists of two key aspects. Most recently, details of the government’s specific contingency plan—called “Black Sky”—designed to prepare for catastrophic cyberattacks or worst-case scenarios such as widespread blackouts, have been publicly disclosed, sparking significant public attention. 1. The “Black Sky” Plan: Preparedness for Cyberattacks and Blackouts As part of the UK government’s “Be Ready” campaign, a plan has been unveiled that anticipates a “Black Sky” event—a total collapse of power and communications infrastructure due to a lethal cyberattack or severe weather conditions. Anticipated chaos during the first 72 hours (3 days): If a large-scale cyberattack occurs, authorities warn that within the first three days, there could be simultaneous failures of mobile phones (smartphones), banking systems and ATMs, train services, electricity, and water supply. NESO (National Energy System Operator) projections: Even in the event of a blackout, current technical capabilities suggest it would take “2–3 days” to restore the power grid. Call for household preparedness: The government strongly urges every household to stockpile essentials to survive several days—including toilet paper, drinking water, cash, and hand-crank emergency radios or flashlights. The last line of communication: FM radio In the event that the internet and terrestrial communication networks are completely destroyed—and satellite communications are insufficient—the government has arranged to deliver emergency information to citizens via FM radio broadcasts. Additionally, to ensure mobile and internet connectivity can be maintained from above for over a week even if ground networks are obliterated, the government is investing more than £70 million (approximately ¥13.5 billion) in developing High Altitude Pseudo-Satellites (HAPS), specialized aircraft designed for this purpose. In addition to the previously mentioned cyberattack on supermarket refrigerators in Europe, a real incident has already occurred in the UK: a small power facility was targeted by a cyberattack and forced offline for four days (though it did not trigger a widespread blackout). Dr. Richard Horn, Chief Executive of the NCSC (National Cyber Security Centre), and others have expressed growing alarm that “hostile nations (such as Russia and Iran) and cybercriminals are rapidly enhancing their ability to hold critical infrastructure hostage.” This public warning aims to prompt both citizens and businesses to prepare realistically, assuming that infrastructure can fail at any moment. KG 🧙‍♀️ So you’re saying it’s dangerous because infrastructure still relies on vulnerabilities like XP, right? Gemini 📕 Exactly. You’ve identified the core issue correctly. Indeed, the fact that outdated infrastructure still running vulnerable systems like Windows XP has become connected to the outside world (the internet) has created an extremely serious risk. The old assumption that “if it’s isolated, it’s safe” has collapsed. Here are three key reasons why this situation is now so perilous: 1. The myth of “air-gapped = secure” has been shattered Previously, it was commonly believed that “even if XP is used, it’s physically disconnected from the internet, so hackers can’t reach it.” But today, this barrier has been breached due to: - Increased remote maintenance: To cut costs and address labor shortages, factories and infrastructure equipment are increasingly being temporarily connected to the internet for remote inspection and repair (as seen in the EU refrigerator incident). - The wave of smartification (IoT): To collect data and improve efficiency, new internet-connected devices are being retrofitted in front of legacy control systems (like XP). If these newly added devices are compromised, they expose the vulnerable XP systems behind them. 2. XP is like an unlocked safe for attackers Windows XP contains hundreds of unpatched, critical vulnerabilities that will never be fixed. For hackers, once they bypass perimeter defenses (like routers), taking over an XP system is easier than turning a child’s hand. Antivirus software for XP has long been discontinued, meaning intrusions often go undetected entirely. 3. The underlying crisis behind the UK’s blackout warning The reason the UK government has gone so far as to warn citizens to prepare for days without power or communication is precisely this grim reality: legacy infrastructure systems are quietly connected to the internet—and are being targeted by state-level hackers. Once breached, attackers can exploit OS vulnerabilities to take systems hostage (via ransomware) or even physically shut down power plants or transmission grids. KG 🧙‍♀️ So that’s why even water supply apps are targeted—and that’s why we’re told to secure water supplies too? Gemini 📕 Exactly right! You’ve understood this perfectly.The UK government lists "drinking water" at the top of its household emergency supply checklist because it realistically anticipates the risk of water supply disruptions due to cyberattacks targeting water utility control systems and pump management applications. The connection between the vulnerabilities of outdated systems like XP in water infrastructure and securing water supplies is profoundly serious: 1. What happens if water utility applications are targeted? Water supply is controlled by IT applications that manage water storage, pressure regulation via pumping stations, and water quality systems (e.g., chlorine level adjustments). If these systems are attacked (e.g., by ransomware), the following scenarios could occur: 🟧 Physical water cutoff: Pump control applications are locked, halting water delivery. 🟧 Chemical dosing ratios altered: Safe drinking water can no longer be supplied (in a real incident in the U.S., hackers attempted to raise sodium hydroxide levels to dangerous concentrations). 🟧 Risk of water contamination: 2. When water stops, everything stops: 🟧 While power outages may be restored within days, water shortages directly threaten human survival. 🟧 Lack of drinking water: Humans can survive only a few days without water. 🟧 Collapse of sanitation: Without water, sewage and toilets become unusable, rapidly deteriorating hygiene conditions in shelters and homes. That’s precisely why the UK government strongly urges every household to stock at least three days’ worth of drinking water—not just for electricity (e.g., crank radios) or information—but to safeguard life. In Japan, too, many water utilities and factories still operate outdated Windows-based control systems under the false assumption that “they’re not connected to the internet, so they’re safe.” But if these systems are breached, the UK’s warning will no longer seem distant—it will become urgently relevant.