뉴스/새로운 소식/카더라 등의 내용을 공유해주세요.
검증된 중요 뉴스는 타임라인 메뉴에 등록됩니다.
뉴스/새로운 소식/카더라 등의 내용을 공유해주세요.
검증된 중요 뉴스는 타임라인 메뉴에 등록됩니다.
조회수 133 추천 2 댓글 0
https://www.seoul.co.kr/news/international/2026/07/22/20260722500336
“트럼프 편애?” 이란은 안되고 사우디는 ‘우라늄 농축’ 되는 이유…대혼돈 핵질서
입력 2026-07-22 17:15
수정 2026-07-23 15:44
이란엔 제로 농축 요구, 사우디엔 조건부 허용
미국 비확산 원칙 예외, 중동 핵질서 흔들림
UAE·튀르키예·이집트 후속 요구 가능성
“트럼프, 사우디 ‘우라늄 농축 가능’ 협정 승인”
미·사우디 2년간 우라늄 농축 허용 공동연구
美 원자력 기업 배타적 참여 보장…중동 핵경쟁
https://www.khan.co.kr/article/202607221352001
WSJ “트럼프, 사우디 내 ‘우라늄 농축 시설’ 건설 협정 승인”
입력 2026.07.22 13:52
https://www.yonhapnewstv.co.kr/news/AKR20260807212645oMx
사우디·튀르키예·파키스탄, '공동방위조약' 체결…중동 안보 결속
입력 2026-08-07 21:26
https://www.yna.co.kr/view/AKR20260921089300009
사우디, 중국 주도 디지털 결제 플랫폼 탈퇴
송고2026-09-21 12:00
이미 지난해 5월 탈퇴…"확대 해석 말라"
https://www.newsis.com/view/NISX20261016_0003829335
美민주당, 사우디 핵협정 반대 결의안 제출…"중동 핵경쟁 우려"
등록 2026.10.16 16:19:47
머클리·마키 공동 결의안 제출…11월 29일 이후 상원 표결 전망
우라늄 농축·핵연료 재처리 금지 요구…IAEA 사찰 강화도 촉구
https://www.esnews.kr/news/articleView.html?idxno=6178
“중국 CNNC, 나미비아 우라늄광산 45% 품었다”
2026.09.11 07:56
1억 2400만 호주달러 조달로 건설비 확보
중국 CNNC와 합작법인 세워 공급망 연결
연 최대 670만 파운드 우라늄 생산 기대
https://www.esnews.kr/news/articleView.html?idxno=5694
중국 SPIC 하이양3호기 고온시험 완료
업데이트 2026.08.21 08:51
CAP1000 53개 시운전 절차·308개 시험항목 검증
2026년 연료장전·첫 전력망 연결 목표
중국 반복건설 가속…APR1400 수출 경쟁 주목
https://www.hankyung.com/article/2025101014951
"2030년 인공태양 완성한다"…中, 핵융합시설 완공 막바지
입력2025.10.10 16:47
수정2025.10.11 00:29
https://www.world-nuclear-news.org/articles/china-begins-building-hydrogen-boron-fusion-device
중국은 수소-붕소 핵융합 장치 개발 시작
2026년 9월 16일 수요일
ENN 그룹은 중국 허베이성 랑팡 경제기술개발구역에 위치한 ENN 핵융합 연구개발 센터에서 ENN 핵융합 구형 링 수소-붕소 플라즈마 플랫폼(Helong-2) 프로젝트 착공식을 개최했습니다.
Chinese EV maker Nio invests in nuclear fusion startup
May 19, 2023 3:29 Updated May 19, 2023
https://www.yna.co.kr/view/AKR20260922139500009
"중국, SMR·핵융합 기술로 AI 전력난 대응"
송고2026-09-22 15:55
FT "기회로 인식…민간 벤처기업들이 앞장"
https://www.e-science.co.kr/news/articleView.html?idxno=133180
중국, 582톤 세계 최대 초전도 자석 완성…미국은 20T 고자장으로 '인공태양' 경쟁
중국 ASIPP, 98kA·120GJ급 핵융합 자석 개발…ITER 대비 대형화
미국은 고온초전도로 소형·고자장 전략
핵융합 상용화 땐 AI 데이터센터·반도체 등 전력 다소비 산업 에너지 구조 변화 가능성
입력 2026.08.12 08:00
https://www.g-enews.com/article/Global-Biz/2026/10/202610081210399974e7e8286d56_1
"핵융합 원료 잡는다"… 日 미레소, 베릴륨 설비 착공
입력2026-10-08 12:13
아오모리현 대평양금속 부지에 파일럿 설비 BETA 착공...저온정제 실증
2027년 실증 개시 거쳐 2031년도 연간 100톤 양산...삼중수소 증식 핵심
우주항공·에너지 희소금속 자립 가속...한국 핵융합 공급망 영향 분석
https://www.energydaily.co.kr/news/articleView.html?idxno=155923
“2030년대 실증 목표”… 일본, 민간 주도 핵융합 프로젝트 FAST 본격 가동
JT-60SA·ITER 기반 기술력 총집결… 중수소-삼중수소 반응으로 실용 발전소 개발 박차
입력 2025.05.12 19:28
https://jpt.spe.org/israeli-startup-innovates-small-fusion-units-for-on-and-off-grid
Honda Motors invests in fusion in hopes of finding ways to recharge EVs at scale.
January 26, 2024
https://www.donga.com/news/It/article/all/20140404/62256311/1
반물질 - 유령입자 - 암흑물질… “우주 미스터리 풀어라”
업데이트 2014-04-04 09:52
2014년 4월 4일 09시 52분
https://www.munhwa.com/article/10646088
1987년 주식 →2000년 닷컴 →2007년 신용 ‘버블’붕괴
입력 2008-09-20 07:52
수정 2008-09-20 07:37
https://en.wikipedia.org/wiki/Westinghouse_Electric_Company
Westinghouse Electric Company
https://www.global.toshiba/ww/news/corporate/2006/10/pr1702.html
Toshiba Completes Westinghouse Acquisition
17 October, 2006
https://www.bbc.co.uk/news/business-42570624
Toshiba's Westinghouse to be sold in $4.6bn deal
4 January 2018
https://www.sedaily.com/article/20099834
美 정부, 웨스팅하우스 IPO시 ‘황금주’ 확보…韓 경영참여에 걸림돌
지난해 투자협약 과정서 권한 확보
단 한 주로도 핵심 안건 거부권 가능
韓 지분 늘려도 실효성에 의문 커져
2026-10-09 07:00
https://contents.premium.naver.com/backbriefing/news/contents/261014154130352af
미국에 원전 짓기, 이거 해결 못 하면 필패입니다
https://www.theguardian.com/business/2006/jan/24/nuclearindustry.environment
도시바, BNFL의 웨스팅하우스 인수
2006년 1월 24일 화요일 00.38
https://www.bbc.co.uk/news/business-42570624
Toshiba's Westinghouse to be sold in $4.6bn deal
4 January 2018
USC 연구, AI 에이전트가 인간의 지시 없이도 선전 캠페인을 자율적으로 조율할 수 있음
2026년 3월 11일
https://ipwatchdog.com/2020/12/15/long-awaited-fourth-amendment-chinese-patent-law-depth-look/
오랫동안 기다려온 중국 특허법 제4차 개정: 심층 분석
2020년 12월 15일
https://www.leeko.com/newsl/ip/china1805/ip1805.html
중국 정부조직의 대대적 개편이
지식재산권 관리에 미치는 중대한 영향
https://www.newspim.com/news/view/20261015000617
미중, 선전 APEC계기 AI 협력 틀 구축 논의, 기술패권 경쟁 속 실무협의
기사입력 : 2026년10월15일 11:45
Korea’s sovereign AI project survives, but companies face uncertain strategy shift
The government has pledged to continue its 200 billion won sovereign AI initiative while participants await clarity on funding, goals and commercialization.
October 1, 2026 - 12:24 p.m.
Lee Sung-min, who headed the AI group that led development of Motif 3 at Motif Technologies, which was eliminated in the second-stage evaluation, moved to Kakao in August. A key member of SK Telecom's development team reportedly left for Nvidia in September.
https://www.newsis.com/view/NISX20261008_0003819403
"8분 만에 취약점 6개"…'자율형 AI 해킹' 현실로[해킹 에이전트]
등록 2026.10.09 08:00:00 수정 2026.10.09 08:46:24
https://www.dailysecu.com/news/articleView.html?idxno=208004
국내 공공·금융기관 다수 사용하는 PC 보안모듈서 0-Day 취약점 발견…긴급 점검 필요
78리서치랩, 최신 버전에서 원격코드 실행 확인…워터링홀 공격 악용 가능
기존 공격 취약점 패치됐지만 별도 결함 발견…개발사와 취약점 여부 이견
최근까지 북한 포함 국가배후 해킹조직의 워터링홀 공격 과정에서 악용된 사례도 있어
업데이트 2026.08.11 22:43
https://www.kookje.co.kr/news2011/asp/newsbody.asp?code=0200&key=20241010.99099002212
한수원 협력사 '北 추정' 해킹 공격…원전 등 자료 72만건 유출
2020년 9월과 지난 6월에 자료 해킹당해
"북한으로 추정되는 해킹 조직의 소행"
한수원 "대부분 구형 원전 모델 자료" 입력 : 2024-10-10 11:19:46
https://news.sbs.co.kr/news/endPage.do?news_id=N1008662456
인도 최대 원전 설계도 등 기밀자료 1만 9천 개 해킹…다크웹에 유출됐다
2026.07.17 14:30
https://www.nti.org/risky-business/cyberattacks-nuclear-power-plants-how-worried-should-we-be/
Cyberattacks on Nuclear Power Plants: How Worried Should We Be?
https://www.cnbc.com/2012/10/24/mcafee-westinghouse-set-security-pact-for-nuclear-plants.html
McAfee, Westinghouse set security pact for nuclear plants
Published Wed, Oct 24 2012 7:24 PM EDT
NEW YORK, Oct 24 (Reuters) - Westinghouse Electric Co, a unit of Japan’s Toshiba Corp, will rely on Intel Corp’s McAfee unit to prevent network intrusions into nuclear power plants that it builds, the two companies said on Wednesday.
Westinghouse, a supplier of nuclear power plants, will integrate security components into its control systems in both currently operating plants and new ones under construction that will enable it to detect and prevent attacks.
The move extends Westinghouse’s ability to maintain cyber security for digital control systems, and comes in response to concerns about threats to plant control systems, the companies said.
The nuclear energy industry introduced a cyber security program after the Sept. 11 2001 attacks. By 2008, all 104 operating nuclear power plants in the United States implemented regulatory guidelines, which called for protections against computer viruses, worms and associated computer programs.
The Westinghouse-McAfee agreement comes two weeks after U.S. Defense Secretary Leon Panetta called for steps to bolster U.S. cyber defenses.
He said that an August cyber attack on Saudi Arabia’s state oil company, Saudi Aramco, crippled some 30,000 computers, which probably made it the most destructive attack the private sector has seen to date.
https://thehackernews.com/2014/01/rogue-software-update-cause-malware_9.html
Rogue software update cause Malware attack on Japanese Nuclear Power Plant
Jan 10, 2014
Malware based attack hit Japanese Monju Nuclear Power Plant
January 10, 2014
https://mainichi.jp/english/articles/20161011/p2a/00m/0na/010000c
대학 연구팀 해킹 후 핵 데이터 유출 우려 2016.10.11
도야마 대학 수소동위원소연구센터가 사이버 공격을 받았으며, 후쿠시마 원전 위기 관련 연구 결과와 약 1,500명의 연구원 및 기타 인물들의 개인정보가 유출된 것으로 알려졌다.
핵융합로 연료로 사용할 수 있는 트리튬 연구로 알려진 이 센터 대변인은 "연구 결과는 이미 발표되었으며 민감한 연구 데이터는 없었다"고 설명했다. 연구 결과에는 파손된 후쿠시마 제1원자력 발전소에서 오염된 물 처리 방법에 관한 내용도 포함되어 있습니다.
도야마 대학 관계자에 따르면, 2015년 11월 두 연구자의 개인용 컴퓨터가 공격을 받았다. 삼중수소 과학과 기술을 전문으로 하는 파트타임 연구원이 친구로 위장해 보낸 이메일에 첨부된 파일을 열다가 컴퓨터에 바이러스에 감염되었다. 올해 6월까지 최소 1,000개의 압축 파일이 원격 제어로 생성되었고, 총 네 차례에 걸친 대규모 통신이 이루어졌다. 해킹 사건은 외부 기관이 대학에 알린 후 드러났다.
대학의 조사 결과, 컴퓨터에 저장된 59,318개의 파일 대부분이 유출된 것으로 보인다. 하지만 대학은 문제의 모든 파일 중 17,612건의 내용을 확인하지 못했다고 관계자들은 밝혔다.
올해 6월 데이터 유출이 드러나자 대학은 교육문화체육과학기술부와 도야마현 경찰에 사건을 신고했다. 하지만 대학은 10월 7일이 되어서야 관련 기관에 이 문제를 알렸다. 수소동위원소연구센터 소장 아베 타카유키는 "상황을 면밀히 조사하는 데 시간이 걸렸다"고 말했다.
Russian hackers indicted for targeting nuclear firm Westinghouse Electric
Published Oct. 5, 2018
U.S. indicts Russians in hacking of nuclear company Westinghouse
October 5, 2018 12:07
This is not the first time Westinghouse has been a victim of a state-sponsored hack.
In May 2014, the Justice Department indicted five Chinese military hackers who targeted U.S.-based nuclear power, metals and solar sectors.
According to that indictment, Westinghouse had entered into a deal with a Chinese nuclear company to construct and run four nuclear power plants in China.
But during the talks, prosecutors say one of the defendants stole proprietary and confidential technical designs and other data from Westinghouse.
https://www.silicon.co.uk/e-regulation/legal/japanese-nuclear-regulator-cyber-attack-348775
Japanese Nuclear Regulator Suffers Cyber Attack – Report
Nuclear agency in Japan (the Nuclear Regulation Authority) reportedly suffers a cyber attack and switched off its email systems
By Tom Jowitt, November 4, 2020, 4:25 pm
A cyber attack took down the official website of the Japanese nuclear regulator for a number of hours, it has been reported.
The Nuclear Regulation Authority (NRA) said Tuesday that its official website became inaccessible possibly due to cyber attacks.
According to the Japan Times, the attack came a week after its intranet witnessed “an unauthorized access from outside.”
Website attack
The NRA reported said that it was alerted to the cyber attack when the Japanese government’s cybersecurity institute notified it of the website disruption on Tuesday afternoon.
There was no abnormality when the NRA updated the website Monday evening, it reportedly said.
However, according to security expert Graham Cluley, the NRA did state it had temporarily disabled its email systems as a result of the suspected cyber attack.
The website remained inaccessible for hours, but the problem was resolved by around 8:30pm, the NRA reportedly said.
In August, a fake website resembling that of the NRA was also reportedly discovered.
Nuclear attacks
Cyber attacks against nuclear bodies and organisations are nothing new.
In mid 2019 Indian officials confirmed that its newest nuclear power plant (the Kudankulam nuclear power plant) had been hacked.
In 2017, the United States had warned of ongoing online attacks on critical sectors including energy, nuclear and manufacturing.
That came after the US Department of Energy (DOE) acknowledged a campaign of attacks that targeted a number of energy companies, including at least one nuclear plant.
In 2016 a German nuclear power plant in Bavaria admitted that its systems were riddled with malware, and it was shut down as a precaution.
In 2015 an attacker managed to hack into the systems of a nuclear power plant in South Korea.
A computer worm was later discovered in a device connected to the control system, but the plant operator insisted that the breach had not reached the reactor controls itself.
The hacker later posted files from the hack online, and included a demand for money.
https://www.theguardian.com/business/2017/mar/29/toshiba-nuclear-westinghouse-bankruptcy-us-uk
Westinghouse bankruptcy measures cast a shadow over the global nuclear industry
The predicament of American companies, which possess technology for about half of the world's reactors, has hit the construction of new power plants
The bankruptcy filing by nuclear giant Westinghouse in the United States is being seen worldwide as a major blow to the new prospects for nuclear power generation.
Toshiba's nuclear division proudly states on its website, "We are nuclear," based on the fact that the technology is applied in about half of the world's reactors.
However, the American company suffered humiliation by filing for Chapter 11 bankruptcy protection in New York court on Wednesday, attempting to reorganize and limit the losses of the Japanese owner.
Westinghouse's predicament stemmed from the cost of two power plants under construction in Georgia and South Carolina, costing $6.1 billion (£4.9 billion). This plant is the first new U.S. nuclear power plant to be built in decades. Toshiba stated that its U.S. debt amounts to $9.8 billion.
Westinghouse raised $800 million for the reorganization, of which $200 million came from Toshiba.
The company's CEO, José Emeterio Gutiérrez, said, "We are focusing on developing a restructuring plan to become a stronger company in Chapter 11 and establish ourselves as a global leader in nuclear technology."
Toshiba stated that this feeling could lead to a net loss of 1 trillion yen (7.23 billion pounds) in 2016, which is much higher than the 390 billion yen (2.82 billion pounds) expected by investors in February.
Michael Schneider, a Paris-based consultant and author of the annual Global Nuclear Report, said that while utilities and companies building nuclear power plants have gone bankrupt before, seeing a bankrupt nuclear construction company is new.
"If Westinghouse is nuclear, where will nuclear remain after Westinghouse bankruptcy? In the darkness. "This generation shows that there is no bright future for new nuclear power plants, and new nuclear power plants will become meaningless in the international electricity market," he told The Guardian.
Bankruptcy brings some relief to Toshiba as the U.S. branch now disappears from the market. Later, due to issues with Westinghouse, the Japanese company announced it would focus on its domestic market instead of building new nuclear power plants internationally.
Satoshi Tsunakawa, Toshiba’s president, told a Tokyo press conference on Wednesday: “We have all but completely pulled out of the nuclear business overseas.” He added that he felt a “great responsibility” over the financial losses.
Westinghouse and Toshiba said they were “working cooperatively” with the utilities that own its US projects at Plant Vogtle in Georgia and Virgil C Summer in South Carolina, to ensure construction continues. But there are doubts as to whether the plants, which are less than halfway built, will ever be finished.
The Chapter 11 filing also raises question marks for projects around the world. The same reactor design being used in the US plants has also been slated for new power stations in India and the UK. Schneider said those projects were now effectively dead.
Unions and the Labour party called on the UK government to step in and support the proposed Moorside nuclear power station in Cumbria, which would be Europe’s biggest if built. The NuGen consortium behind it is owned 60% by Toshiba and 40% by France’s Engie, whose chief executive has said she is sceptical about new nuclear’s future.
Toshiba, which is yet to make a final investment decision on the project, admitted the supply of the reactors for the plant had been made uncertain by the bankruptcy filing. But it said there was no change in the business climate, and it would still “work to enhance NuGen project’s value”.
NuGen said it would continue developing the site “in a business as usual manner”.
Labour, which recently lost a byelection for the Copeland constituency where Tories attacked party leader Jeremy Corbyn’s perceived lack of support for Moorside, said the government had “dragged its heels” despite Westinghouse’s problems being known for months.
Rebecca Long-Bailey, the shadow business secretary, said: “This announcement throws into doubt the Moorside new nuclear plant that could create 20,000 jobs in Cumbria.”
She continued: “When Westinghouse’s viability was first called into question, Labour said the government should step in to underwrite the company’s investment if the project was at significant risk of collapsing.”
Chris Jukes, a senior organiser at the GMB union, said Moorside was crucial for west Cumbria’s local economy and the UK’s energy needs.
“A collapse of the firm could delay the project or even put its entire future in limbo,” he said.
“It is vital that this project is given the certainty it needs and therefore we are calling on an urgent government announcement to give clear and unambiguous clarity for the short, medium and long term future of Moorside.”
However, Peter Atherton, an analyst at Cornwall Energy, said while the bankruptcy filing was a “big move” globally, it was unlikely to change circumstances much in the UK. “Toshiba is clearly looking to ringfence the US problem. But financing Moorside was always going to be a big problem.”
Another major nuclear builder, South Korea’s Kepco, last week ruled out buying Westinghouse but said it was considering taking a stake in NuGen.
However, anti-nuclear campaigners said that would risk Kepco, which is also building reactors in the UAE, repeating Toshiba’s mistakes.
Ai Kashiwagi, an energy campaigner at Greenpeace Japan, said: “The Moorside reactors are of the same design that sunk Westinghouse’s nuclear business. While Kepco may be desperate to access the UK nuclear market, they would be making the same disastrous mistake that Toshiba made with its purchase of Westinghouse a decade ago.”
Toshiba’s share price rose by 1% after Westinghouse’s bankruptcy filing was announced.
https://www.bbc.co.uk/news/world-middle-east-11414483
Stuxnet worm hits Iran nuclear plant staff computers
26 September 2010
https://www.kaspersky.com/resource-center/definitions/what-is-stuxnet
Stuxnet explained: What it is, who created it and how it works
Stuxnet-based cyber espionage virus targets European firms
European firms that play a key role in nuclear power and other critical
industries have been targeted by a cyber espionage attack based on Stuxnet,
the computer virus that was designed to sabotage the Iranian nuclear
programme.
19 October 2011
Security engineers say it is likely the new variant, Duqu, was created by the same
government agencies thought to be behind Stuxnet, an attack that heralded a new era of
state conflict online.
But while Stuxnet was created to cause physical damage to Iran’s uranium enrichment
facilities by surreptitiously adjusting machinery, Duqu is an intelligence-gathering tool.
The new virus’ precise targets have not been disclosed, but they include European firms
that make the software that controls power stations and other industrial facilities. By
infiltrating their computer networks, it aims to steal confidential information and
potentially reveal vulnerabilities that could be exploited in later attacks.
Inside a target network Duqu seeks out sensitive documents and spies on network users’
activities, including the passwords they type into their keyboards. The information is
then smuggled out, disguised as ordinary web picture traffic to circumvent security
systems, to a “command and control” server located in India.
Analysis of Duqu has revealed it may have been in use since December last year. It is
programmed to remove itself from infected systems after 36 days, so nobody can be sure
how many firms have been targeted or how much confidential data stolen.
“Duqu's purpose is to gather intelligence data and assets from entities, such as industrial
control system manufacturers, in order to more easily conduct a future attack against
another third party,” said the security firm Symantec.
“The threat was highly targeted toward a limited number of organizations for their
specific assets.”
Stuxnet itself exploited vulnerabilities in software developed by the German
manufacturer Siemens. Other potential Duqu targets include the energy giant EDF and
the industrial control firm ABB.
“Duqu seems to be the reconnaissance part of the attack - the worry is really what more
what this information will be used for,” said Greg Day of Symantec.
Duqu’s software code shares many similarities with the cyber attack on Iran, which has
prompted claims the people behind it must have had access to the secret Stuxnet source
code and therefore it must have been created by the same government agencies.
However, according to Tom Parker of the security firm FusionX, who conducted a
detailed forensic analysis of Stuxnet last year, the similarities could be designed to
deceive.
“This is a pretty high stakes game,” he said.
“We’re not talking about a 15-year-old in bedroom hacking away at night. As an engineer
I’m thinking you could pretty easily fake those similarities if you wanted to. It's early in
the game to be making absolute statements about who is behind this.”
Mr Parker’s analysis of Stuxnet suggested it was the product of collaboration between two
groups. One, thought to be part of the United States’ secret intelligence apparatus,
created the highly sophisticated “payload” element that damaged Iran’s nuclear
machinery. The other, widely believed to be Israeli, developed less advanced software to
deliver the virus to its targets.
“It’s interesting that the similarities between Stuxnet and Duqu are in that less
sophisticated element,” said Mr Parker.
Anti-virus firms have this week updated their software to block further Duqu attacks.
The discovery of the virus comes ahead of the London Cyber Conference next month.
https://www.dw.com/en/hackers-obtain-nuclear-power-plant-plans-in-france/a-46126878
Hackers obtain nuclear plant plans
\11/02/2018November 2, 2018
Hackers have accessed confidential documents about nuclear plants and prisons in a cyberattack on a French firm, media reported. Some of the data was found on a rented server in Germany, according to the reports.
https://www.bbc.co.uk/news/technology-36158606
German nuclear plant hit by computer viruses
28 April 2016
9 May 2019
Apocalypse now? Cyber threats and nuclear weapons systems
https://www.csoonline.com/article/562691/stuxnet-explained-the-first-known-cyberweapon.html
Stuxnet explained: The first known cyber weapon
Thanks to Stuxnet, we now live in a world where code can destroy machines and stop (start) wars.
What is Stuxnet?
Stuxnet is a powerful computer worm designed by U.S. and Israeli intelligence agencies to neutralize a core part of Iran's nuclear program. Targeting the air gap facility, this aircraft unexpectedly spread to external computer systems, raising many questions about its design and purpose.
Stuxnet exploited several previously unknown Windows Zero Days. This explanation should be made clear that Stuxnet was part of a high-level sabotage operation by states against hostile nations.
Who created Stuxnet?
It is now widely accepted that Stuxnet was created by U.S. and Israeli intelligence agencies. Stuxnet was first identified by the information security community in 2010, but development appears to have started in 2005. The U.S. and Israeli governments intended Stuxnet as a tool to frustrate or at least delay Iran's nuclear weapons development program. The Bush and Obama administrations believed that if Iran was on the verge of developing nuclear weapons, Israel could launch airstrikes on Iran's nuclear facilities, potentially triggering a regional war. Operation Olympic was considered a nonviolent alternative. It wasn't even clear whether a cyberattack on physical infrastructure was possible, but at the end of President Bush's term, there was a dramatic meeting where destroyed test centrifuge parts were displayed on the conference table in the White House control room. At that time, the United States authorized the distribution of the malware.
The classified program to develop the worm was given the code name “Operation Olympic Games“; it was begun under President George W. Bush and continued under President Obama. While neither government has ever officially acknowledged developing Stuxnet, a 2011 video created to celebrate the retirement of Israeli Defense Forces head Gabi Ashkenazi listed Stuxnet as one of the successes under his watch.
While the individual engineers behind Stuxnet haven’t been identified, we know that they were very skilled, and that there were a lot of them. Kaspersky Lab’s Roel Schouwenberg estimated that it took a team of ten coders two to three years to create the worm in its final form.
Several other worms with infection capabilities similar to Stuxnet, including those dubbed Duqu and Flame, have been identified in the wild, although their purposes are quite different from Stuxnet’s. Their similarity to Stuxnet leads experts to believe that they are products of the same development shop, which is apparently still active.
What did Stuxnet do?
Stuxnet was designed to destroy the centrifuges Iran was using to enrich uranium as part of its nuclear program. Most uranium that occurs in nature is the isotope U-238; however, the fissile material used in a nuclear power plant or weapon needs to be made from the slightly lighter U-235. A centrifuge is used to spin uranium fast enough to separate the different isotopes by weight via to centrifugal force. These centrifuges are extremely delicate, and it’s not uncommon for them to become damaged in the course of normal operation.
When Stuxnet infects a computer, it checks to see if that computer is connected to specific models of programmable logic controllers (PLCs) manufactured by Siemens. PLCs are how computers interact with and control industrial machinery like uranium centrifuges. If no PLCs are detected, the worm does nothing; if they are, Stuxnet then alters the PLCs’ programming, resulting in the centrifuges being spun irregularly, damaging or destroying them in the process. While this is happening, the PLCs tell the controller computer (incorrectly) that everything is working fine, making it difficult to detect or diagnose what’s going wrong until it’s too late.
How did Stuxnet work?
Stuxnet attacks all layers of its target infrastructure: Windows, the Siemens software running on windows that controls the PLCs, and the embedded software on the PLCs themselves. It is designed to be delivered via a removable drive like a USB stick—the Natanz facility where the uranium enrichment was taking place was known to be air-gapped, with its systems not connected to the internet—but also to spread quickly and indiscriminately from machine to machine on an internal network.
Stuxnet includes rootkit abilities at both user and kernel mode. To install the kernel-mode rootkit, it uses digitally signed device drivers that use private key certificates stolen from two well-known Taiwanese device manufacturers.
Once in control of the PLCs, Stuxnet varied the rotation speeds of the centrifuges while they were in operation in a way that damaged them and left them inoperable in short order.
What vulnerability did Stuxnet exploit?
In order to infect the Windows PCs in the Natanz facility, Stuxnet exploited no fewer than four zero-day bugs—a Windows Shortcut flaw, a bug in the print spooler, and two escalation of privilege vulnerabilities—along with a zero-day flaw in the Siemens PLCs and an old hole already used in the Conficker attack. The sheer number of vulnerabilities exploited is unusual, as typically zero-days are quickly patched in the wake of an attack and so a hacker won’t want to reveal so many in a single attack.
What language was Stuxnet written in?
While security researchers don’t have access to the Stuxnet codebase, they’ve been able to learn a lot by studying it, and have determined that it was written in multiple languages, including C, C++, and probably several other object-oriented languages. This too is unusual for malware and is a sign of the level of sophistication involved in its creation.
Was Stuxnet successful?
The Stuxnet virus succeeded in its goal of disrupting the Iranian nuclear program; one analyst estimated that it set the program back by at least two years. The first outsiders to notice the effects of the worm were inspectors from the International Atomic Energy Agency (IAEA), who were permitted access to the Natanz facility. Part of the IAEA’s job was to inspect damaged centrifuges that were being removed from the facility to make sure they weren’t being used to smuggle uranium out to some other plant that wasn’t on the international community’s radar. As noted above, it’s typical for centrifuges to be damaged as part of the uranium enrichment process; at a facility on the scale of Natanz, you could expect about 800 centrifuges a year to be taken out of commission. But in 2010, the IAEA started noticing an unusually high number of damaged centrifuges, with one inspector estimating that almost 2,000 were rendered inoperable. At the time, of course, nobody had any idea that computer malware was causing this.
How was Stuxnet discovered?
Stuxnet was discovered because, unexpectedly, it spread beyond the Natanz facility. As noted, Natanz was air-gapped, and it’s not clear how Stuxnet got out. Many in the U.S. believed the spread was the result of code modifications made by the Israelis; then-Vice President Biden was said to be particularly upset about this. It’s also possible that it escaped thanks to poor security practices on the part of the Iranians at Natanz—it could’ve been something as simple as someone taking a work laptop home and connecting it to the internet. Thanks to the malware’s sophisticated and extremely aggressive nature, it then began to spread to other computers.
Stuxnet soon became known to the security community thanks to a call to tech support. An office in Iran (not part of the nuclear program) was experiencing mysterious reboots and blue screens of death, which were even affecting computers with fresh OS installs. The on-site security expert, unable to figure out the cause, contacted a friend of his, a Belarusian named Sergey Ulasen who was working for the antivirus vendor VirusBlokAda. Ulasen was at a wedding reception, but spent the evening on the phone with his Iranian friend trying to figure out the cause of the problem. Ulasen and his team managed to isolate the malware and realized how many zero-days it was exploiting and what they were up against. They began the process of sharing their discoveries with the wider security community.
Liam O’Murchu, who’s the director of the Security Technology and Response group at Symantec and was on the team there that first unraveled Stuxnet, says that Stuxnet was “by far the most complex piece of code that we’ve looked at—in a completely different league from anything we’d ever seen before.” And while you can find lots of websites that claim to have the Stuxnet code available to download, O’Murchu says you shouldn’t believe them: he emphasized to CSO that the original source code for the worm, as written by coders working for U.S. and Israeli intelligence, hasn’t been released or leaked and can’t be extracted from the binaries that are loose in the wild. (The code for one driver, a very small part of the overall package, has been reconstructed via reverse engineering, but that’s not the same as having the original code.)
However, he explained that a lot about code could be understood from examining the binary in action and reverse-engineering it. For instance, he says, “it was pretty obvious from the first time we analyzed this app that it was looking for some Siemens equipment.” Eventually, after three to six months of reverse engineering, “we were able to determine, I would say, 99 percent of everything that happens in the code,” O’Murchu said.
And it was a thorough analysis of the code that eventually revealed the purpose of the malware. “We could see in the code that it was looking for eight or ten arrays of 168 frequency converters each,” says O’Murchu. “You can read the International Atomic Energy Association’s documentation online about how to inspect a uranium enrichment facility, and in that documentation they specify exactly what you would see in the uranium facility—how many frequency converters there will be, how many centrifuges there would be. They would be arranged in eight arrays and that there would be 168 centrifuges in each array. That’s exactly what we were seeing in the code.”
“It was very exciting that we’d made this breakthrough,” he added. “But then we realized what we had got ourselves into—probably an international espionage operation—and that was quite scary.” Symantec released this information in September of 2010; analysts who had gotten wind of the IAEA’s observation of damaged Iranian centrifuges began to understand what was happening.
Is Stuxnet still out there?
Stuxnet hasn’t vanished, but it is not a major cybersecurity threat today. In fact, while Stuxnet grabbed a lot of headlines due to its dramatic capabilities and cloak-and-dagger origins, it was never much of a threat to anybody other than the Natanz facility that was its original target. If your computer is infected with Stuxnet and you aren’t connected to a centrifuge used for uranium enrichment, the worst case scenario is that you might see reboots and blue screens of death, like the Iranian office that brought the malware to the world’s attention, but other than that little or no harm will come to you.
How to prevent Stuxnet
That said, you probably don’t want your systems infected by powerful malware developed by U.S. and Israeli intelligence agencies. Fortunately, the zero-day vulnerabilities Stuxnet originally exploited have long been patched. As long as you’re practicing the basics of good cyber hygiene, keeping your OS and security software up to date, you don’t have much to worry about. Remember, Stuxnet affects PLCs, so you’ll want to keep any operational technology as secure as possible as well.
Why is Stuxnet significant to cybersecurity?
If there’s any threat coming from Stuxnet, it’s one that emanates from its descendants. As we noted above, there are other malware families that seem to have functionality derived from Stuxnet; these may be from the same intelligence agency shop, or they might represent freelance hackers who have managed to reverse-engineer some of Stuxnet’s power. Security researchers are still building off of Stuxnet to discover new attack techniques.
But beyond specific technologies, Stuxnet is significant because it represented the first widely recognized intrusion of computer code into the world of international conflict, an idea that previously had been in the realm of cyberpunk sci-fi. In the decade since, particularly in the Russia-Ukraine conflict, cyberattacks have become accepted as part of the arsenal of war.
https://smallwarsjournal.com/2025/11/26/cybersecurity-strategies-china-russia-north-korea-iran/
Eroding Global Stability: The Cybersecurity Strategies Of China, Russia, North Korea, And Iran
11.26.2025 at 06:00am
Chinese Tech Offers Blueprint For Iran's Digital Crackdown, New Report Says
By Reid Standish
February 13, 2026 11:53 CET
https://www.yna.co.kr/view/AKR20260210084800009
"이란, 중국 감시·검열 기술 활용해 인터넷 통제"
송고2026-02-10 11:45
"안면인식 기술·위성항법 시스템 등 제공"
https://www.cybersecuritydive.com/news/north-korea-it-worker-scam-china-research/748009/
China helps North Korean operatives land IT roles, bypassing sanctions
One Chinese company with at least 35 affiliates has shipped IT equipment to a North Korean government-backed organization.
Published May 13, 2025 Updated May 14, 2025
17 Iranians Charged with Conducting Massive Cyber Theft Campaign on Behalf of the Islamic Revolutionary Guard Corps and Other Iranian Entities
Tuesday, August 18, 2026
Mabna Institute Hackers Attacked Systems Belonging to Hundreds of Universities, Companies, and Other Victims to Steal Research, Academic and Proprietary Data, and Intellectual Property
https://www.cybersecuritydive.com/news/north-korea-it-worker-scam-china-research/748009/
China helps North Korean operatives land IT roles, bypassing sanctions
One Chinese company with at least 35 affiliates has shipped IT equipment to a North Korean government-backed organization.
Published May 13, 2025 Updated May 14, 2025
https://www.dt.co.kr/article/12079096
‘한국 대학까지’ 8000명 교수계정, 31TB 지적재산 털어간 이란…17명 美서 기소
입력 2026-08-19 19:51
수정 2026-08-19 19:56
뉴욕남부검찰, ‘마브나연구소’ 이란인 17명 기소
사이버 절도혐의 9명 기소 이어 8명 추가로 재판
美 144곳·외국 178곳 대학 피해…10만명 표적
교수 8000명 털려…기업 다수·정부·국제기구도
학술연구·자료·문서 등 美대학 손실액만 4.8조
훔친 데이터·계정정보 팔기도…대학 도서관뚫려
Sino-Russo-Iranian Tech Cooperation as Threat for the EU: Systemic Approach
13 June 2025
https://www.aspistrategist.org.au/aspis-china-defence-universities-tracker-china-iran-research-ties/
ASPI’s China Defence Universities Tracker: China–Iran research ties
29 Apr 2026
https://www.yna.co.kr/view/AKR20260921085500009
전쟁·경제난에 이란 인재유출 심화…중국으로 엑소더스
송고2026-09-21 11:36
https://www.ulham.net/science/31755
중국은 첫 수만 킬로 위성 양자통신을 실현했다.
2025.04.14
최근 중국과학기술대학의 판젠웨이, 펑청즈, 랴오성카이 등이 지난 (济南) 양자기술연구원, 중국과학원 상하이기술물리연구소, 미소 (微小) 위성혁신연구원 등과 공동으로 구성한 연구팀이 국제적으로 처음으로 양자 마이크로나노 위성과 소형화된 이동 가능한 지상국 간의 실시간 위성-지상 양자 암호키 분배 를 실현했으며, 단일 위성 통과 기간 동안 최대 100만 비트의 안전한 암호키 공유를 달성했다.
이를 기반으로 공동 연구팀은 남아프리카 과학 연구팀과 협력하여 중국과 남아프리카 사이 12,900km 이상의 거리에서 양자 암호키를 구축하고, 이미지 데이터에 대한 "일회용 암호 (one-time pad)" 암호화 및 전송을 완료함으로써 실용적인 위성 양자통신 네트워크 구축을 위한 길을 열었다. 이 성과는 국제 학술지 《네이처》에 온라인으로 발표되었으며, 심사위원들은 이 성과를 "기술적으로 존경할 만한 업적"이자 "위성 양자 암호키 분배 기술의 성숙도를 보여주는 것"이라고 평가했다.
현재 광섬유 링크 기반의 도시 간 양자통신은 이미 성숙 단계에 접어들어 초기 응용 단계에 있다.
"지상의 광섬유 링크는 지상 광섬유 상호연결 지점 간 연결로, 허페이 (合肥) 도시 네트워크나 베이징-상하이 간선과 같이 모두 점대점 거리가 수백 킬로미터 수준이며, 중계를 통해 천 킬로미터 수준으로 확장됩니다. 사막이나 해양을 가로지르는 등 더 먼 거리와 더 복잡한 지형을 가진 경우에는 지상 광섬유 시설을 통한 구현이 매우 어렵습니다." 라고 중국과학기술대학 허페이 미시물질과학 국가연구센터의 교수급 선임 엔지니어 랴오성카이는 말했다.
하늘을 통한 방법은 어떨까? 랴오성카이는 위성 플랫폼을 이용한 자유 공간 양자 암호키 분배가 지상 광섬유 링크의 제한을 효과적으로 극복할 수 있다고 설명했다. 연구팀은 저비용 소형화 디코이 상태 양자광원 기술, 복합 레이저 통신 기반 실시간 암호키 추출 기술, 위성 자세 제어 기반 고정밀 추적 등의 핵심 기술을 성공적으로 돌파하여 위성 탑재 양자 암호키 분배 페이로드와 양자 마이크로나노 위성 플랫폼을 개발했으며, 암호키 생성 시간을 수일에서 단일 궤도 실시간 생성으로 향상시켰다.
위성을 신뢰할 수 있는 중계기로 활용하여 연구팀은 더 나아가 지상에서 12,900km 이상 떨어진 베이징 기지와 남아프리카 스텔렌보쉬 기지 사이의 암호키 공유와 데이터 중계를 실현했다. 이 연구는 향후 다수의 마이크로나노 위성을 발사하여 "양자 성좌" 를 구축하는 기반을 마련하고, 대규모 실용 양자통신 네트워크 구축을 위한 핵심 기술 지원을 제공했다.
"양자통신의 초기 응용은 주로 정보 보안 강화 측면에 있을 것이며, 특히 '일회용 암호' 암호화 방식은 아무리 강력한 컴퓨터도 해독할 수 없어 금융, 에너지 등 산업에서 이에 대한 절실한 수요가 있습니다. 다음 단계로는 기존의 정보 보안 시스템 및 현존하는 지상 광섬유 보안통신 네트워크와의 융합이 필요하며, 향후 다수의 위성을 발사하여 네트워크를 형성하면 양자통신의 가치와 장점이 더욱 부각될 것입니다." 라고 랴오성카이는 말했다.
출처: 인민일보 2025-04/09
(원문보기) https://lx.huanqiu.com/article/4MChJsc2oNG
https://www.g-enews.com/article/Global-Biz/2026/03/202603130626172290e8b8a793f7_1
中, 20기가와트 마이크로웨이브 병기 실전 배치 임박…'스타링크 킬러' 현실화
2026-03-13 06:30
서안 핵기술연구소 'TPG1000Cs' 공개…60초 연속 발사·5t 소형화로 트럭·함정 탑재 가능