US CISA and the DoE issue an insight about a threat to UPS devices
The Cybersecurity and Infrastructure Security Agency (CISA) and the Department of Energy issue an insight concerning possible threats to internet-connected uninterruptible power supply (UPS) devices through unchanged default usernames and passwords. The insight recommends the following: (1) ensure that UPSs and similar systems are not accessible from the internet. If this is not the case, then to ensure the device or system is behind a VPN, enforce multi-factor authentication and use strong passwords following NIST guidelines, (2) update your UPS username/password so that it no longer matches the default. And (3) ensure that credentials for all UPSs and similar systems adhere to strong password requirements and adopt login timeout/lockout features
About author
DW Team
The GIP Digital Watch Observatory team, consisting of over 30 digital policy experts from around the world, excels in the fields of research and analysis on digital policy issues. The team is backed by the creative prowess of Creative Lab Diplo and the technical expertise of the Diplo tech team.
