U.S. agencies warn of attacks against internet-connected uninterruptible power supply (UPS) devices by means of default usernames and passwords. UPS devices provide emergency power in a variety of applications when normal power sources are lost. The agencies advise organizations to disconnect all UPS systems from the internet and gate them behind a virtual private network (VPN) as well as enforce multi-factor authentication. The warnings come three weeks after Armis researchers disclosed multiple high-impact security flaws in APC Smart-UPS devices.”]
Source: https://thehackernews.com/2022/03/cisa-warns-of-ongoing-cyber-attacks.html