[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fue1fVZ4DCUh-tMOcngh31FWy209HwsX3GjmiBk0KES4":3},{"article":4,"iocs":49,"watch_terms":60,"solutions":61,"lesson":153},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"9f428e81-f49f-4d1e-a65c-6709af85062b","1 in 5 Data Center Assets Are Within Easy Reach of Attackers","1-in-5-data-center-assets-are-within-easy-reach-of-attackers-fd286e","Claroty has analyzed 750,000 cyber-physical systems across some of the world’s largest data center facilities. The post 1 in 5 Data Center Assets Are Within Easy Reach of Attackers appeared first on SecurityWeek.","Claroty's analysis of over 750,000 data center assets reveals that approximately 18% of cyber-physical systems are one network hop away from internet-exposed pathways, posing a significant risk. These systems, including HVAC and power distribution units, are vulnerable to exploitation through insecure protocols, known exploited vulnerabilities, and weak authentication, potentially disrupting critical data center operations.","1 in 5 data center cyber-physical systems are one network hop from internet-exposed systems.","https:\u002F\u002Fwww.securityweek.com\u002F1-in-5-data-center-assets-are-within-easy-reach-of-attackers\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2024\u002F09\u002FData-center-Cybersecurity-1.jpg","2026-07-30T09:28:37+00:00","2026-07-30T10:00:08.340366+00:00",7,[17,20,23,25,27,29],{"name":18,"type":19},"Claroty","vendor",{"name":21,"type":22},"OT","technology",{"name":24,"type":22},"IoT",{"name":26,"type":22},"CPS",{"name":28,"type":22},"SCADA",{"name":30,"type":22},"PLC","d6f63bb8-0801-486a-be7f-171400700454",{"id":31,"icon":33,"name":34,"slug":35},null,"IoT\u002FOT","iot-ot",[37,42,44],{"category":38},{"id":39,"icon":33,"name":40,"slug":41},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":43},{"id":31,"icon":33,"name":34,"slug":35},{"category":45},{"id":46,"icon":33,"name":47,"slug":48},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[50,54,57],{"type":51,"value":52,"context":53},"mitre_attack","T1190","Exploitation of Remote Services",{"type":51,"value":55,"context":56},"T1071","Application Layer Protocol",{"type":51,"value":58,"context":59},"T1550","Use Alternate Authentication Material",[18],{"controls":62,"vendors":149},[63,92,121],{"slug":64,"name":65,"problem":66,"products":67},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[68,76,84],{"vendor_slug":69,"vendor_name":70,"vendor_logo":71,"product_slug":72,"product_name":73,"url":74,"description":75},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"vendor_slug":77,"vendor_name":78,"vendor_logo":79,"product_slug":80,"product_name":81,"url":82,"description":83},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":85,"vendor_name":86,"vendor_logo":87,"product_slug":88,"product_name":89,"url":90,"description":91},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"slug":93,"name":94,"problem":95,"products":96},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",[97,105,113],{"vendor_slug":98,"vendor_name":99,"vendor_logo":100,"product_slug":101,"product_name":102,"url":103,"description":104},"akamai","Akamai","\u002Fvendor-logos\u002Fakamai.png","guardicore-segmentation","Akamai Guardicore Segmentation","https:\u002F\u002Fwww.akamai.com\u002Fproducts\u002Fakamai-guardicore-segmentation","Software-based microsegmentation with traffic visibility.",{"vendor_slug":106,"vendor_name":107,"vendor_logo":108,"product_slug":109,"product_name":110,"url":111,"description":112},"illumio","Illumio","\u002Fvendor-logos\u002Fillumio.png","illumio-segmentation","Illumio Segmentation","https:\u002F\u002Fwww.illumio.com\u002Fillumio-segmentation","Maps traffic between workloads and enforces segmentation across data centre, cloud and endpoints.",{"vendor_slug":114,"vendor_name":115,"vendor_logo":116,"product_slug":117,"product_name":118,"url":119,"description":120},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","zero-trust-endpoint-firewall","Zero Trust Endpoint Firewall","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fzero-trust-endpoint-firewall","Centrally managed host firewall with device-level and dynamic access rules, to limit which machines can talk to each other.",{"slug":122,"name":123,"problem":124,"products":125},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection.",[126,134,142],{"vendor_slug":127,"vendor_name":128,"vendor_logo":129,"product_slug":130,"product_name":131,"url":132,"description":133},"nozomi-networks","Nozomi Networks","\u002Fvendor-logos\u002Fnozomi-networks.png","guardian","Nozomi Networks Guardian","https:\u002F\u002Fwww.nozominetworks.com\u002Fplatform\u002Fguardian","Passive monitoring, asset inventory and threat detection for OT and IoT networks.",{"vendor_slug":135,"vendor_name":136,"vendor_logo":137,"product_slug":138,"product_name":139,"url":140,"description":141},"dragos","Dragos","\u002Fvendor-logos\u002Fdragos.png","dragos-platform","Dragos Platform","https:\u002F\u002Fwww.dragos.com\u002Fcybersecurity-platform\u002F","OT asset visibility, threat detection and response guidance for industrial environments.",{"vendor_slug":143,"vendor_name":18,"vendor_logo":144,"product_slug":145,"product_name":146,"url":147,"description":148},"claroty","\u002Fvendor-logos\u002Fclaroty.png","xdome","Claroty xDome","https:\u002F\u002Fclaroty.com\u002Findustrial-cybersecurity\u002Fxdome","Asset inventory, vulnerability management and threat detection for industrial networks.",[150],{"slug":143,"name":18,"logo_path":144,"roles":151},[152],"reported_by",{"slug":154,"title":155,"body":156,"framework_refs":157,"framework_notes":167},"1-in-5-data-center-cyber-physical-assets-exposed-within-one-network-hop","1 in 5 Data Center Cyber-Physical Assets Exposed Within One Network Hop","Claroty's analysis of over 750,000 data center assets found that roughly 18% of cyber-physical systems — including HVAC units and power distribution units — are just one network hop away from internet-exposed pathways. These systems rely on insecure legacy protocols, carry known unpatched vulnerabilities, and often use weak or default authentication credentials, making them attractive targets for attackers. Compromising these systems doesn't just mean a data breach — it can result in physical disruption to critical infrastructure, including power failures or environmental damage. This finding highlights a systemic failure to apply IT security principles to operational technology (OT) and cyber-physical environments. The convergence of IT and OT networks without adequate segmentation dramatically expands the attack surface.",[158,159,160,161,162,163,164,165,166],"CIS Control 1: Inventory and Control of Enterprise Assets","CIS Control 12: Network Infrastructure Management","CIS Control 13: Network Monitoring and Defense","NIST SP 800-82: Guide to ICS\u002FOT Security","NIST CSF PR.AC-5: Network Integrity Protection","NIST CSF PR.PT-4: Communications and Control Networks Protection","IEC 62443: Industrial Automation and Control Systems Security","NERC CIP-005: Electronic Security Perimeters","NIST SP 800-207: Zero Trust Architecture",{}]