InfoSecBulletin Cybersecurity for mankind
According to cybersecurity analysts at Dragos, while cloud adoption offers many benefits for industrial companies , it also poses certain risks. The core operational risks relate to interruptions in data center cooling systems.
Data centers use building automation and management systems (BAS/BMS) to control important aspects like temperature.
CISA alerts to cyberattacks affecting U.S. water utilities
“CyberStrike” AI-Driven Security Platform for Automated Testing
AIDCQ Propose to invest $2 billion in AI data center in Bangladesh
NVIDIA BlueField Flaw Enables Code Execution Attacks
Massive customer data from India’s Bank of Baroda surfaced online
Active Exploits Hit Fortinet, Arista: AI Discovered Linux Kernel Zero-Day
Sam Altman Claims AI “singularity” has arrived, Where Systems Improve by Themselves
Shinyhunters claimed and set deadline to publish E&Y data
Microsoft, NVIDIA and CrowdStrike Initiate Alliance for Open-Source AI Security
Google Search Results Reportedly Show Claude AI Shared Chats
Places like these use advanced cooling methods such as air conditioning, chilled water, and liquid cooling to keep the network, storage, and computational systems at the right operating temperatures. If the cooling systems fail without a backup, overheating or shut down could occur in less than a minute.
Cooling System Outages:
Overheating has caused problems in cooling systems, leading to disruptions in services for customers. For example, a lightning strike in August 2023 caused cooling system chillers to shut down in several Microsoft data centers in Australia. This led to nearly 12 hours of service downtime, affecting organizations like the Bank of Queensland and Jetstar.
On October 14, 2023, a problem with the cooling system at an Equinix Data Centre in Singapore caused temperatures to rise, disrupting services at DBS Bank Limited and Citibank. This led to about 2.5 million failed transactions and up to 810,000 failed digital banking access attempts. Data center cooling failures can be extremely damaging, as demonstrated by these incidents.
Hackers are showing interest in targeting building management systems, focusing on infrastructure like coolers. The CHERNOVITE malware can theoretically alter protocols widely used within data centers.
Cooling system failures in infrastructures can cause reputational harm, service denial or unavailability, operational impact, and loss of situational awareness for industrial organizations that rely on data centers.
Recommendations:
Given the conveyed risk of operational disruption posed by outages to data centre cooling systems, Dragos recommends that organisations:
- Assess the importance of applications and services that depend on data centres.
- Include data center outages in disaster/incident response planning and develop a standard operating procedure to address these situations.
- Discuss failover risks and cooling system outages with cloud service providers. Verify their backup and redundancy plans for these incidents.
