CISA Issues Warning on Backup Power Supply

Cyber security is becoming a big issue for businesses. Cyber attacks on business are increasing in both frequency and severity.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning business about Internet connected backup power supplies. Uninterruptible power supplies (UPS) are found in many businesses to guard against short term power loss. In a post “Mitigating Attacks Against Uninterruptable Power Supply Devices“, CISA and the Department of Energy (DOE) describe an an increase of attacks due to lax security when many companies install a UPS and leave the default username or password supplied by the manufacturer.

To better protect your environment you should take these simple steps:

• change default passwords on all systems
• Don’t connect the management interface directly to the Internet, keep on a separate internal VLAN
• Update firmware and check periodically

Call RPM Computing at (877) 375-6160 to arrange an audit of your networks.