'A single cyber incident can lead to physical disruption, create safety hazards, or cause catastrophic downtime': Hackers target data center equipment, including critical power devices, in latest push to disrupt communities

Date:
Wed, 17 Jun 2026 21:05:00 +0000

Description:
Cybersecurity researchers found vulnerabilities in power and cooling systems inside data centers that could allow attackers to disrupt physical infrastructure operations

FULL STORY ======================================================================Copy link Facebook X Whatsapp Reddit Pinterest Flipboard Threads Email Share this article 0 Join the conversation Follow us Add us as a preferred source on Google Newsletter Subscribe to our newsletter Attackers are now targeting physical systems inside data center environments Power infrastructure vulnerabilities could shut down entire computing networks instantly Cooling system breaches may trigger overheating across server facilities Modern data centers face a growing threat from cybercriminals who now target physical infrastructure components rather than just software systems, as attackers
know compromising a single power device or climate control unit could trigger massive operational failures across entire computing facilities.

The financial stakes are extraordinarily high because downtime in these facilities often costs hundreds of thousands of dollars per hour. Recent research from Claroty's Team82 has now uncovered severe vulnerabilities in
two essential categories of data center equipment widely deployed across
major facilities, raising concerns for users everywhere. Latest Videos From Watch full video here: The silent risks hiding inside power and climate systems The first set of problems affects Vertiv's Uninterruptible Power Supply (UPS) network cards, which maintain stable electricity during grid fluctuations or blackouts.

Any successful exploit of these flaws could effectively shut down every
server and router depending on that power protection system. You may like
When dust means downtime: why data centers need rigorous preventive maintenance The new reality of critical infrastructure security in the age of hybrid threats Arizona data centers raise Phoenix temperatures by up to 4 degrees

The second discovery involves deeply buried weaknesses within Trane Tracer
SC+ HVAC controllers that regulate temperatures in server rooms.

An attacker exploiting these issues could execute unauthenticated remote code and gain complete control over a building's environmental management systems without any prior access credentials. Are you a pro? Subscribe to our newsletter Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed! Contact me
with news and offers from other Future brands Receive email from us on behalf of our trusted partners or sponsors By submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over.

Standard protections such as antivirus software may not fully cover these systems because they directly control physical infrastructure rather than
just data.

This creates a risk where malware or targeted attacks could affect both digital services and the physical environment supporting them.

Data centers must make a fundamental shift in how they redefine their cyber and operational resilience goals, given that a single cyber incident can lead to physical disruption, create safety hazards, or cause catastrophic
downtime, said Amir Preminger, CTO of Claroty and head of Team82. What to
read next The blueprint architecture for securing the AI data center Three ways data centers can operate more sustainably Report claims power demands
may halt AI data center advances soon

Our research shows that the risk to data center stability is very real and very present. Data center operators must move quickly to treat CPS protection as a business imperative to drive risk reduction and maintain operational uptime.

Preminger also noted that increasing demand from cloud computing and AI is making these systems more critical than ever before.

The vulnerabilities were disclosed to manufacturers Trane and Vertiv, who worked with researchers to fix the issues before public release. Data center operators need to act fast The world now depends heavily on AI workloads running exclusively inside data centers that governments and industry increasingly treat as critical infrastructure.

Threat actors are simultaneously deploying AI-enabled attacks while targeting physical systems that sit outside traditional security perimeters.

A compromised UPS device cannot be fixed by rebooting a server because the power path itself becomes the attack surface.

Similarly, a weaponized HVAC controller could trigger automatic shutdowns across entire server rooms to prevent permanent hardware destruction.

Every data center operator must recognize that cyber-physical convergence means a single intrusion can cross from digital to physical domains almost instantly.

Securing power equipment and climate control panels against remote code execution is now just as critical as protecting customer databases.

No security team can afford to treat power gear and HVAC panels as secondary concerns behind firewalls and encryption protocols. Follow TechRadar on
Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds.



======================================================================
Link to news story: https://www.techradar.com/pro/security/a-single-cyber-incident-can-lead-to-phy sical-disruption-create-safety-hazards-or-cause-catastrophic-downtime-hackers- target-data-center-equipment-including-critical-power-devices-in-latest-push-t o-disrupt-communities


--- Mystic BBS v1.12 A49 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)