cxo voice
  • Home
  • Technology
    • AI
    • Cloud
    • Telecom
    • Data Center
    • BPM
    • Blockchain
  • Finance
    • Banking
  • Cyber Security
  • View Points
  • Leaders Talk
  • News
  • Press Release
    • Submit Press Release
No Result
View All Result
  • Home
  • Technology
    • AI
    • Cloud
    • Telecom
    • Data Center
    • BPM
    • Blockchain
  • Finance
    • Banking
  • Cyber Security
  • View Points
  • Leaders Talk
  • News
  • Press Release
    • Submit Press Release
No Result
View All Result
Leaders Talk and Latest Tech News | CXO VOICE
No Result
View All Result
Home News Cyber Security

Attackers exploited discontinued web server at Tata Power

News Desk by News Desk
November 24, 2022
IT Security

Microsoft has warned that state-sponsored hackers are attacking critical energy infrastructure in India via exploiting a discontinued web server, with the most recent attack observed on Tata Power last month. Microsoft security researchers discovered a vulnerable open-source component in the “Boa web server” still being used in routers, security cameras, and popular software development kits (SDKs), despite its retirement in 2005.

Tata Power last month admitted it was hit by a cyber attack on its IT infrastructure. The power company, however, said that all its critical operational systems were functioning normally.

The cyber attack on Tata Power was the handiwork of the Hive ransomware group that has victimized over 1,300 firms globally, receiving approximately $100 million in ransom payments, according to a joint advisory by the FBI, the US Cybersecurity and Infrastructure Security Agency, and the Department of Health and Human Services last week.

Microsoft said it sees attackers attempting to exploit Boa vulnerabilities, indicating that it is still targeted as an attack vector.

A report published by cybersecurity company Recorded Future in April this year first detailed suspected electrical grid intrusion activity and implicated common IoT devices.

While investigating the attack activity, Microsoft researchers assessed the vulnerable component to be the now-retired Boa web server, which is often used to access settings and management consoles and sign-in screens in devices.

ADVERTISEMENT

“Without developers managing the Boa web server, its known vulnerabilities could allow attackers to silently gain access to networks by collecting information from files,” said the tech giant.

Moreover, those affected may be unaware that their devices run services using the discontinued Boa web server and that firmware updates and downstream patches do not address its known vulnerabilities.

“Microsoft assesses that Boa servers were running on the IP addresses on the list of IOCs published by Recorded Future at the time of the report’s release and that the electrical grid attack targeted exposed IoT devices running Boa,” said the security researchers.

Tata Power Company had said that some of its IT systems were impacted by the cyber attack.

According to Microsoft, the popularity of the Boa web server displays the potential exposure risk of an insecure supply chain, even when security best practices are applied to devices in the network.

“In critical infrastructure networks, being able to collect information undetected prior to the attack allows the attackers to have much greater impact once the attack is initiated, potentially disrupting operations that can cost millions of dollars and affect millions of people,” it added.

Disclaimer: Only the headline and image of this article may have been edited by the CXOvoice, the rest of the content is generated from a syndicated feed.

Also Read: Slack Security Concerns and DLP solutions

News Desk

News Desk

by CXO VOICE team memebrs, [email protected]

Related Posts

Ericsson SoftBank
Business

Ericsson Partners with SoftBank to Expand 4G and 5G Network with AI-Driven Solutions

August 1, 2025
Thimaya Subaiya
People

Genpact Appoints Thimaya Subaiya to Board of Directors

August 1, 2025
AI Breaches
AI

The Growing Risks of AI-related Breaches: Insights from IBM’s 2025 Report

July 31, 2025
Palo Alto CyberArk
Cyber Security

Palo Alto Networks to Acquire CyberArk for $25 Billion, Strengthening Identity Security and Cyber Defense

July 31, 2025
Ericsson
Press Release

Ericsson teams with Sunswift Racing to enhance race experience with 5G and satellite Intelligent Bonding

July 31, 2025
Sophos Partner Program
Business

Sophos Launches New Partner Program to Drive Growth and Market Advantage for Partners

July 31, 2025
Visa
Press Release

Visa Brings Google Pay Integration to Fleet Cards, Enabling Tokenization and Push-to-Wallet Across the Digital Wallet Ecosystem

July 30, 2025
LTIMindtree BlueVerse CraftStudio
Technology

LTIMindtree Unveils BlueVerse CraftStudio: Revolutionizing Marketing with AI-Powered Solutions in Partnership with Adobe

July 30, 2025
Load More
ADVERTISEMENT

Latest Updates

Ericsson SoftBank

Ericsson Partners with SoftBank to Expand 4G and 5G Network with AI-Driven Solutions

by News Desk
2 days ago

Thimaya Subaiya

Genpact Appoints Thimaya Subaiya to Board of Directors

by Deepa Sharma
2 days ago

AI Breaches

The Growing Risks of AI-related Breaches: Insights from IBM’s 2025 Report

by Deepa Sharma
3 days ago

Palo Alto CyberArk

Palo Alto Networks to Acquire CyberArk for $25 Billion, Strengthening Identity Security and Cyber Defense

by Deepa Sharma
3 days ago

Ericsson

Ericsson teams with Sunswift Racing to enhance race experience with 5G and satellite Intelligent Bonding

by News Desk
3 days ago

Sophos Partner Program

Sophos Launches New Partner Program to Drive Growth and Market Advantage for Partners

by News Desk
3 days ago

Expert Views

Cyber Security

Why Even One Unpatched Device Can Be a Catastrophic Risk for Startups and SMBs

July 25, 2025
Cyber Criminals
Cyber Security

How WormGPT Became ChatGPT’s Evil Twin

July 15, 2025
Opinion

When AI Empowers Both Networks and Hackers: The New Battlefield for India’s Telecoms

May 20, 2025
Molly Sands AI
AI

AI RIP: 5 Things Knowledge Workers Will Say ‘Sayonara’ to in the Next Decade

March 8, 2025
multi cloud
Cloud

Multi-Cloud Made Simple: Strategies for Smart Business Management

March 5, 2025

Get Latest Update

Subscribe to our mailing list to receives newsletter direct to your inbox!

ADVERTISEMENT

Leaders Interviews

Steve Wilson, GenAI Cybersecurity LLMs
Cyber Security

How effective is GenAI in cybersecurity? The role of LLMs and AI in security solutions. [Interview with Steve Wilson]

-
Interview on Counterfeit products with Nikhil Narayan
Leaders Talk

Advancements in ML & AI made it possible to detect counterfeit products in real-time, says Nikhil Narayan

-
Newgenone bridges the gap between business users and IT teams with its low code capability: Varun Goswami
Leaders Talk

Newgenone bridges the gap between business users and IT teams with its low code capability: Varun Goswami

-
AI chatbots, Prasanna-Kumar
Leaders Talk

Can AI chatbots enhance customer experience and reduce the cost of serving customers?

-

Entrepreneur

Samsung Electronics appoints its first female president

Inspiring Women Entrepreneurs in India (2022)

Technology Adoption For Entrepreneurs

Volunteering management is the need of the Hour

CXOVoice.com is a leading online publication for CXOs, entrepreneurs, senior leaders, developers, and industry professionals. Our coverage spans key sectors, including IT, technology, banking, finance, cybersecurity, engineering, and automobiles.

Connect with us

Easy Links

  • Cryptocurrency
  • Event
  • Blockchain
  • Press Release
  • Resources & Downloads

Write Us

[email protected]
  • Home
  • About Us
  • Contact Us
  • Advertise
  • Privacy & Policy
  • Feedback

Copyright © 2025 CXOVoice - All Right Reserved

Welcome Back!

Login to your account below

Forgotten Password?

Retrieve your password

Please enter your username or email address to reset your password.

Log In

Add New Playlist

Our Spring Sale Has Started

You can see how this popup was set up in our step-by-step guide: https://wppopupmaker.com/guides/auto-opening-announcement-popups/

No Result
View All Result
  • Home
  • Technology
    • AI
    • Cloud
    • Telecom
    • Data Center
    • BPM
    • Blockchain
  • Finance
    • Banking
  • Cyber Security
  • View Points
  • Leaders Talk
  • News
  • Press Release
    • Submit Press Release

Copyright © 2025 CXOVoice - All Right Reserved