Threats from APC power supplies, a warning to ServiceNow administrators and more.
Welcome to Cyber Security Today. It’s Friday March 11th, 2022. I’m Howard Solomon, contributing reporter on cybersecurity for ITWorldCanada.com.
Security pros usually don’t think an uninterruptable power supply box can be used as a cyber threat. But anything connected to the internet is a risk. The latest example are three critical firmware vulnerabilities found in APC’s Smart-UPS devices. According to security researchers at Armis, if exploited the bugs could allow these backup power supplies to be taken over and damaged by cyber attackers. The damage could spread to connected sensitive devices like hospital or industrial equipment as well as servers. The bugs could also be used to break into corporate IT networks and install malware. Schneider Electric, which makes the APC line, has created a patch that needs to be installed fast.
IT administrators who use the cloud-based ServiceNow platform for IT management support aren’t locking down their systems properly. That comes from a report by a security researcher at AppOmni. They said nearly 70 per cent of tested ServiceNow instances were…
