Researchers have found over 20,000 instances of publicly exposed data center infrastructure management software that monitor devices, HVAC control systems, and power distribution units. The applications give full remote access to data center assets, provide status reports, and offer users the capacity to configure various system parameters. In most cases, the applications used default passwords or were severely outdated, allowing threat actors to compromise them or override security layers fairly easily. The implications, in any case, are dire, and closing these loopholes should be a priority.”]