Reported by 2 outlets

Timeline

1. original reporting

   548 Internet-Exposed Building Automation Devices Run End-of-Life Products With No Future Security Patches

   cyberpress.org · 61d ago · August 13th, 2026

   A new security study has found that 548 internet-exposed building automation devices near U.S. data centers are running end-of-life products that will not receive future security patches. The affected devices belong to three legacy product lines: Tridium NiagaraAX 3.x, Trane Tracer SC, and Carrier WebCTRL version 7.0. These platforms are used to manage systems such as HVAC, cooling, power monitoring, and environmental controls. In a data center, a compromise of these systems could affect the physical infrastructure that keeps servers online. The finding comes from a wider scan of industrial control system (ICS) and building automation system (BAS) devices located near more than 1,000 U.S. data center locations. Researchers identified 6,300 high-confidence internet-accessible devices, including BACnet controllers, Niagara platforms, programmable logic controllers, and power-management interfaces. The filtering pipeline: five layers of validation reduced 73,847 raw Shodan records to 6,300 high-confidence ICS devices (8.5% of initial results) (Source: trendaisecurity) Building automation was the main exposure point. BACnet devices accounted for 58% of the findings, while Fox/Niagara systems represented 23%. Together, the two technologies made up 81% of the exposed systems in the dataset. These protocols were largely designed for trusted internal networks and often lack modern authentication and encryption protections. 548 Building Devices Unpatched End-of-life products present a

2. update from gbhackers.com

   6,330 Internet-Exposed ICS Devices Near U.S. Data Centers Put Cooling and Power Systems at Risk

   gbhackers.com · 61d ago · August 13th, 2026

   Exposing a largely overlooked attack surface around infrastructure responsible for cooling, power conditioning and environmental monitoring. The finding underscores a fundamental security gap: hardened server networks do not necessarily extend to […] The post 6,330 Internet-Exposed ICS Devices Near U.S. Data Centers Put Cooling and Power Systems at Risk appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .