Listen to this Post
Introduction: The Silent Security Gap Inside the Data Center Era
The world is building data centers faster than ever. Artificial intelligence, cloud computing, cryptocurrency, enterprise applications, and digital services are driving unprecedented demand for massive computing facilities. Behind every AI model, streaming platform, financial system, and online service are physical environments filled with power equipment, cooling systems, industrial controllers, and automated infrastructure.
But while organizations race to expand digital capacity, a new security concern is emerging: the physical systems keeping these facilities alive may be far more exposed than previously believed.
New research from cybersecurity company Claroty reveals that nearly one out of every five cyber-physical systems (CPS) inside major data centers sits only one network connection away from systems already exposed to the internet. These hidden pathways could allow attackers to move from traditional IT environments into operational technology (OT) systems responsible for electricity distribution, cooling, environmental controls, and emergency infrastructure.
The discovery highlights a growing challenge in modern cybersecurity: protecting not only software and data, but also the physical machines that keep the digital world operating.
Claroty Research Reveals Hidden Attack Paths Inside Critical Data Center Infrastructure
A Massive Analysis of Data Center Cyber-Physical Systems
Claroty analyzed more than 750,000 assets across large-scale data center environments, including approximately 191,000 operational technology (OT) assets and 174,000 infrastructure assets.
The infrastructure category included critical systems such as:
Heating, ventilation, and air conditioning (HVAC)
Power monitoring systems
Electrical distribution equipment
Fire management systems
Uninterruptible power supplies (UPS)
Building management platforms
These systems are often overlooked because they are not traditional computers. However, they directly control the physical conditions required for data centers to function.
A successful attack against these systems would not simply steal information. It could interrupt operations, damage equipment, create downtime, or potentially impact thousands of businesses relying on cloud infrastructure.
The One-Hop Danger: A Hidden Bridge Between the Internet and Physical Systems
Only a Small Number Are Directly Exposed — But Many Are Still Reachable
Claroty’s research found that fewer than 1,000 infrastructure assets, representing only about 0.4% of the analyzed systems, were directly exposed to the internet.
At first glance, this number may appear reassuring.
However, the bigger concern is what researchers describe as “one-hop exposure.”
Approximately 32,000 infrastructure assets, representing around 18% of the total, were located only one network connection away from internet-facing systems. This means attackers may not need direct access to these devices.
Instead, they could compromise another connected system and use it as a stepping stone into critical infrastructure.
This type of attack path is becoming increasingly common because modern environments are deeply interconnected. A vulnerable remote management tool, poorly configured network device, or compromised IT system can become the gateway to industrial equipment.
Why Cyber-Physical Systems Are Becoming Prime Targets
Attackers Are Moving Beyond Data Theft
Cybercriminal groups have traditionally focused on stealing information, deploying ransomware, or compromising user accounts.
However, critical infrastructure attacks offer a different opportunity: disruption.
Data centers depend on thousands of physical components working together. If attackers gain control over these systems, they may be able to interfere with:
Cooling operations
Electrical distribution
Backup generators
Environmental monitoring
Building automation
Safety systems
Even a short disruption can create significant financial losses. Large cloud providers, financial institutions, healthcare organizations, and government agencies depend on continuous availability.
The security challenge is that many operational systems were not originally designed with modern cybersecurity threats in mind.
Power and Cooling Systems Face Major Exposure Risks
HVAC and Electrical Infrastructure Remain Weak Points
Claroty found that 41% of power distribution units and 32% of HVAC systems were only one connection away from risky internet-connected pathways.
These findings are especially concerning because cooling and electricity are among the most important components inside any data center.
A cyberattack affecting cooling infrastructure could cause overheating, forcing servers to shut down or reducing performance.
An attack against power systems could interfere with energy distribution, backup operations, or emergency response mechanisms.
Unlike a compromised website or stolen database, cyberattacks against physical infrastructure can create real-world consequences.
Building Management Systems Create Additional Security Challenges
Legacy Technology Continues to Increase Cyber Risk
Modern data centers often rely on building management systems (BMS) to monitor and control physical environments.
However, Claroty discovered significant weaknesses in these systems:
88% communicate using insecure protocols
40% operate with outdated firmware
Many industrial communication protocols were created decades ago, at a time when cybersecurity was not a major design requirement.
These systems frequently prioritize reliability and availability over security. As a result, organizations may struggle to apply modern protections without affecting operations.
The combination of legacy technology and increased connectivity creates a dangerous security gap.
Thousands of OT Devices Contain Known Exploited Vulnerabilities
Attackers Already Know Where Weaknesses Exist
Claroty researchers identified thousands of devices affected by vulnerabilities that are already known to be exploited by attackers.
Among OT control systems, including SCADA and PLC devices, approximately 11,000 systems contained known exploited vulnerabilities.
SCADA and PLC technologies are commonly used for industrial automation. They allow organizations to control machinery, monitor processes, and manage critical operations.
When these systems contain unpatched vulnerabilities, attackers may gain the ability to manipulate physical processes.
The problem becomes even more serious because many operational systems cannot always be patched quickly due to uptime requirements.
The Growing Cybersecurity Challenge of AI Data Centers
Artificial Intelligence Infrastructure Creates New Pressure
The rapid expansion of artificial intelligence is accelerating the construction of massive data centers worldwide.
AI-focused facilities require enormous amounts of electricity and advanced cooling systems. As these environments become larger and more complex, their attack surfaces expand.
The cybersecurity industry faces a difficult balance:
Organizations must build faster to meet AI demand, but security cannot become an afterthought.
A compromised AI data center would not only affect servers. It could impact the physical systems responsible for maintaining the entire facility.
The future of cybersecurity will increasingly involve protecting the relationship between digital networks and physical infrastructure.
Recommended Security Actions for Data Center Operators
Moving Toward Stronger Cyber-Physical Protection
Claroty recommends several measures to reduce risk:
Continuous Exposure Management
Organizations should constantly monitor their environments to identify hidden attack paths, outdated devices, and risky connections.
Zero Trust Network Segmentation
Data centers should separate IT networks from operational systems and prevent unnecessary communication between devices.
Hardening Building Management Systems
Security teams should upgrade outdated firmware, replace insecure protocols, and strengthen authentication.
Protocol-Aware Threat Detection
Traditional cybersecurity tools may not understand industrial communication. Specialized monitoring is required to identify unusual behavior inside OT environments.
Deep Analysis Commands: Understanding the Future Data Center Security Battlefield
Command 1: Map Every Hidden Connection
Organizations must stop viewing internet exposure as only a direct connection problem.
Modern attackers do not always need a publicly accessible device.
They search for indirect paths.
A single compromised workstation, vendor account, remote management platform, or cloud-connected tool may become the first step toward critical infrastructure.
Command 2: Separate Digital Operations From Physical Controls
The traditional security model treats IT systems as the main priority.
That approach is no longer enough.
Data centers are now complex cyber-physical ecosystems where software controls physical operations.
Security teams must treat cooling, power, and automation systems as critical assets equal to servers and databases.
Command 3: Eliminate Legacy Security Blind Spots
Many operational systems were installed years before modern cyber threats existed.
Organizations should identify outdated protocols, unsupported firmware, and weak authentication methods.
Legacy infrastructure should not automatically be trusted simply because it has operated safely for years.
Command 4: Prepare for AI Infrastructure Attacks
AI data centers will become attractive targets because they represent enormous economic value.
Attackers may attempt ransomware, sabotage, espionage, or disruption campaigns against these facilities.
The larger the infrastructure becomes, the greater the potential impact.
Command 5: Build Security Into Expansion Plans
The next generation of data centers cannot rely on security improvements added after construction.
Cybersecurity must become part of architecture from the beginning.
Network segmentation, identity protection, monitoring, and physical security must be designed together.
What Undercode Say:
Data Centers Are Becoming the New Critical Infrastructure Battlefield
The Claroty research exposes a major reality: the modern internet depends on physical systems that many organizations still underestimate.
The Hidden Risk Is Not Direct Exposure
The most dangerous systems are not always those directly connected to the internet.
Attackers increasingly exploit relationships between systems and use trusted connections as pathways.
AI Expansion Is Increasing Cyber Pressure
The AI revolution is creating thousands of new data centers, but every new facility expands the potential attack surface.
Speed without security creates long-term risks.
Operational Technology Needs Equal Protection
For years, cybersecurity teams focused heavily on endpoints, applications, and databases.
Now, industrial equipment and physical infrastructure must receive the same level of attention.
Legacy Systems Are Becoming Strategic Weaknesses
Old protocols and outdated firmware are not simply technical problems.
They are potential entry points for nation-state groups and criminal organizations.
One Network Connection Can Become a Major Incident
A single overlooked connection may provide attackers with access to systems controlling millions of dollars in infrastructure.
Cybersecurity Must Follow the Physical World
The future of cybersecurity is no longer only about protecting information.
It is about protecting the machines that keep society functioning.
✅ Confirmed: Claroty analyzed more than 750,000 data center assets and identified significant cyber-physical exposure risks involving OT and infrastructure systems.
✅ Confirmed: The research found that approximately 18% of infrastructure assets were one network hop away from internet-exposed systems, creating potential attack paths.
❌ Not Confirmed: The findings do not indicate that attackers have successfully compromised these specific data center systems. The research identifies potential vulnerabilities and exposure risks, not confirmed breaches.
Prediction
(-1) Cyber-Physical Attacks Against Data Centers Will Increase as AI Infrastructure Expands
Attackers are likely to increasingly target the physical systems behind digital services because these environments represent high-value disruption opportunities.
(+1) Security Investment in OT Protection Will Accelerate
Growing awareness of cyber-physical risks will push organizations toward stronger segmentation, better monitoring, and improved protection for industrial systems.
(-1) Legacy Infrastructure Will Remain a Major Weakness
Many organizations will continue struggling with outdated equipment that cannot easily be replaced, creating long-term security challenges.
(+1) Future Data Centers Will Adopt Security-First Architecture
New facilities are expected to integrate cybersecurity into design, construction, and operation instead of treating it as a separate layer.
▶️ Related Video (60% Match):
🕵️📝Let’s dive deep and fact‑check.
🎓 Live Courses & Certifications:
Join Undercode Academy for Verified Certifications
🚀 Request a Custom Project:
Secure, high-velocity infrastructure and disruptive technological engineering. Contact our engineering team for high-tier development and proprietary systems:
[email protected]
💎 Smart Architecture | 🛡️ Secure by Design | ⭐ Trusted by Thousands
References:
Reported By: www.securityweek.com
Extra Source Hub (Possible Sources for article):
https://www.reddit.com
Wikipedia
OpenAi & Undercode AI
Image Source:
Unsplash
Undercode AI DI v2
🔐JOIN OUR CYBER WORLD [ CVE News • HackMonitor • UndercodeNews ]
📢 Follow UndercodeNews & Stay Tuned:
𝕏 formerly Twitter 🐦 | @ Threads | 🔗 Linkedin | 🦋BlueSky | 🐘Mastodon | 📺Youtube
