InfoSecBulletin Cybersecurity for mankind
According to cybersecurity analysts at Dragos, while cloud adoption offers many benefits for industrial companies , it also poses certain risks. The core operational risks relate to interruptions in data center cooling systems.
Data centers use building automation and management systems (BAS/BMS) to control important aspects like temperature.
Microsoft’s Alarming Report: 600 Million Cyberattacks perday
CVE-2024-38814
VMware fixes high-severity SQL injection flaw in HCX
Over 90 Zero-Days, 40+ N-Days Exploited In The Wild
Oracle Security Update, 334 Vulnerabilities Patched
Chrome 130 Launches with Patches for 17 Security Vulnerabilities
Researchers Break RSA Encryption with Quantum Computing
Shadowserver's data
87000+ Fortinet devices still open to attack?
Gmail Scam Alert
Billions of Gmail users at risk from sophisticated new AI hack
RansomHub Targets Bangladeshi Confidence Group
Hackers using ChatGPT create malware, OpenAI confirm
Places like these use advanced cooling methods such as air conditioning, chilled water, and liquid cooling to keep the network, storage, and computational systems at the right operating temperatures. If the cooling systems fail without a backup, overheating or shut down could occur in less than a minute.
Cooling System Outages:
Overheating has caused problems in cooling systems, leading to disruptions in services for customers. For example, a lightning strike in August 2023 caused cooling system chillers to shut down in several Microsoft data centers in Australia. This led to nearly 12 hours of service downtime, affecting organizations like the Bank of Queensland and Jetstar.
On October 14, 2023, a problem with the cooling system at an Equinix Data Centre in Singapore caused temperatures to rise, disrupting services at DBS Bank Limited and Citibank. This led to about 2.5 million failed transactions and up to 810,000 failed digital banking access attempts. Data center cooling failures can be extremely damaging, as demonstrated by these incidents.
Hackers are showing interest in targeting building management systems, focusing on infrastructure like coolers. The CHERNOVITE malware can theoretically alter protocols widely used within data centers.
Cooling system failures in infrastructures can cause reputational harm, service denial or unavailability, operational impact, and loss of situational awareness for industrial organizations that rely on data centers.
Recommendations:
Given the conveyed risk of operational disruption posed by outages to data centre cooling systems, Dragos recommends that organisations:
- Assess the importance of applications and services that depend on data centres.
- Include data center outages in disaster/incident response planning and develop a standard operating procedure to address these situations.
- Discuss failover risks and cooling system outages with cloud service providers. Verify their backup and redundancy plans for these incidents.
