Vulnerabilities in UPS and HVAC Could Collapse Data Centers

Modern data centers face a new wave of cyber threats targeting their physical infrastructure. Attackers are now exploiting vulnerabilities in essential components like Uninterruptible Power Supply (UPS) network cards and Trane Tracer SC+ HVAC controllers. These systems, critical for maintaining stable power and optimal temperatures, are not typically covered by standard antivirus software, creating a significant risk for operational failure.

Compromising a UPS device could instantly halt all dependent servers and routers, while a weaponized HVAC controller could trigger shutdowns to prevent hardware damage. The financial implications are substantial, with data center downtime costing hundreds of thousands of dollars per hour. As demand for cloud computing and AI services grows, the criticality of these physical systems increases, necessitating a fundamental shift in how data centers approach cyber and operational resilience.