cxo voice
  • Home
  • Technology
    • AI
    • Cloud
    • Telecom
    • Data Center
    • BPM
    • Blockchain
  • Finance
    • Banking
  • Cyber Security
  • View Points
  • Leaders Talk
  • News
  • Press Release
    • Submit Press Release
No Result
View All Result
  • Home
  • Technology
    • AI
    • Cloud
    • Telecom
    • Data Center
    • BPM
    • Blockchain
  • Finance
    • Banking
  • Cyber Security
  • View Points
  • Leaders Talk
  • News
  • Press Release
    • Submit Press Release
No Result
View All Result
Leaders Talk and Latest Tech News | CXO VOICE
No Result
View All Result
Home News Cyber Security

Attackers exploited discontinued web server at Tata Power

News Desk by News Desk
November 24, 2022
IT Security

Microsoft has warned that state-sponsored hackers are attacking critical energy infrastructure in India via exploiting a discontinued web server, with the most recent attack observed on Tata Power last month. Microsoft security researchers discovered a vulnerable open-source component in the “Boa web server” still being used in routers, security cameras, and popular software development kits (SDKs), despite its retirement in 2005.

Tata Power last month admitted it was hit by a cyber attack on its IT infrastructure. The power company, however, said that all its critical operational systems were functioning normally.

The cyber attack on Tata Power was the handiwork of the Hive ransomware group that has victimized over 1,300 firms globally, receiving approximately $100 million in ransom payments, according to a joint advisory by the FBI, the US Cybersecurity and Infrastructure Security Agency, and the Department of Health and Human Services last week.

Microsoft said it sees attackers attempting to exploit Boa vulnerabilities, indicating that it is still targeted as an attack vector.

A report published by cybersecurity company Recorded Future in April this year first detailed suspected electrical grid intrusion activity and implicated common IoT devices.

While investigating the attack activity, Microsoft researchers assessed the vulnerable component to be the now-retired Boa web server, which is often used to access settings and management consoles and sign-in screens in devices.

ADVERTISEMENT

“Without developers managing the Boa web server, its known vulnerabilities could allow attackers to silently gain access to networks by collecting information from files,” said the tech giant.

Moreover, those affected may be unaware that their devices run services using the discontinued Boa web server and that firmware updates and downstream patches do not address its known vulnerabilities.

“Microsoft assesses that Boa servers were running on the IP addresses on the list of IOCs published by Recorded Future at the time of the report’s release and that the electrical grid attack targeted exposed IoT devices running Boa,” said the security researchers.

Tata Power Company had said that some of its IT systems were impacted by the cyber attack.

According to Microsoft, the popularity of the Boa web server displays the potential exposure risk of an insecure supply chain, even when security best practices are applied to devices in the network.

“In critical infrastructure networks, being able to collect information undetected prior to the attack allows the attackers to have much greater impact once the attack is initiated, potentially disrupting operations that can cost millions of dollars and affect millions of people,” it added.

Disclaimer: Only the headline and image of this article may have been edited by the CXOvoice, the rest of the content is generated from a syndicated feed.

Also Read: Slack Security Concerns and DLP solutions

News Desk

News Desk

by CXO VOICE team memebrs, [email protected]

Related Posts

AI Enterprise
Business

Most Enterprises Still Stuck in Early AI Experimentation, HFS–LTIMindtree Report Finds

August 29, 2025
ARISE FOR YOU
Startup

ARISE FOR YOU™: HCLTech, Pearson India, and MeitY Startup Hub Unite to Empower Young Entrepreneurs in India

August 29, 2025
Vertiv
Business

Vertiv to Acquire custom rack solutions manufacturer for $200 Million, Strengthening Position in Critical Digital Infrastructure

August 28, 2025
Accenture NeuraFlash
Business

Accenture Strengthens AI Portfolio with Acquisition of NeuraFlash, Enhancing Salesforce Solutions

August 28, 2025
HPE Saudi
Business

HPE Launches New ‘Saudi Made’ Servers Powered by 5th Gen AMD EPYC Processors

August 28, 2025
IBM and AMD
Technology

IBM and AMD Join Forces to Revolutionize Computing with Quantum Technology

August 27, 2025
Capgemini Cloud4C
Business

Capgemini to Acquire Cloud4C, a well-established global managed cloud services provider

August 26, 2025
CT Scanners
News

Samsung Partners with NeuroLogica to Launch Innovative Mobile CT Scanners in India

August 26, 2025
Load More
ADVERTISEMENT

Latest Updates

AI Enterprise

Most Enterprises Still Stuck in Early AI Experimentation, HFS–LTIMindtree Report Finds

by News Desk
2 days ago

ARISE FOR YOU

ARISE FOR YOU™: HCLTech, Pearson India, and MeitY Startup Hub Unite to Empower Young Entrepreneurs in India

by Deepa Sharma
2 days ago

Vertiv

Vertiv to Acquire custom rack solutions manufacturer for $200 Million, Strengthening Position in Critical Digital Infrastructure

by Deepa Sharma
3 days ago

Accenture NeuraFlash

Accenture Strengthens AI Portfolio with Acquisition of NeuraFlash, Enhancing Salesforce Solutions

by Deepa Sharma
3 days ago

HPE Saudi

HPE Launches New ‘Saudi Made’ Servers Powered by 5th Gen AMD EPYC Processors

by Arshi Khan
3 days ago

IBM and AMD

IBM and AMD Join Forces to Revolutionize Computing with Quantum Technology

by Arshi Khan
4 days ago

Expert Views

Cyber Security

Why Even One Unpatched Device Can Be a Catastrophic Risk for Startups and SMBs

July 25, 2025
Cyber Criminals
Cyber Security

How WormGPT Became ChatGPT’s Evil Twin

July 15, 2025
Opinion

When AI Empowers Both Networks and Hackers: The New Battlefield for India’s Telecoms

May 20, 2025
Molly Sands AI
AI

AI RIP: 5 Things Knowledge Workers Will Say ‘Sayonara’ to in the Next Decade

March 8, 2025
multi cloud
Cloud

Multi-Cloud Made Simple: Strategies for Smart Business Management

March 5, 2025

Get Latest Update

Subscribe to our mailing list to receives newsletter direct to your inbox!

ADVERTISEMENT

Leaders Interviews

Steve Wilson, GenAI Cybersecurity LLMs
Cyber Security

How effective is GenAI in cybersecurity? The role of LLMs and AI in security solutions. [Interview with Steve Wilson]

-
Interview on Counterfeit products with Nikhil Narayan
Leaders Talk

Advancements in ML & AI made it possible to detect counterfeit products in real-time, says Nikhil Narayan

-
Newgenone bridges the gap between business users and IT teams with its low code capability: Varun Goswami
Leaders Talk

Newgenone bridges the gap between business users and IT teams with its low code capability: Varun Goswami

-
AI chatbots, Prasanna-Kumar
Leaders Talk

Can AI chatbots enhance customer experience and reduce the cost of serving customers?

-

Entrepreneur

Samsung Electronics appoints its first female president

Inspiring Women Entrepreneurs in India (2022)

Technology Adoption For Entrepreneurs

Volunteering management is the need of the Hour

CXOVoice.com is a leading online publication for CXOs, entrepreneurs, senior leaders, developers, and industry professionals. Our coverage spans key sectors, including IT, technology, banking, finance, cybersecurity, engineering, and automobiles.

Connect with us

Easy Links

  • Cryptocurrency
  • Event
  • Blockchain
  • Press Release
  • Resources & Downloads

Write Us

[email protected]
  • Home
  • About Us
  • Contact Us
  • Advertise
  • Privacy & Policy
  • Feedback

Copyright © 2025 CXOVoice - All Right Reserved

Welcome Back!

Login to your account below

Forgotten Password?

Retrieve your password

Please enter your username or email address to reset your password.

Log In

Add New Playlist

Our Spring Sale Has Started

You can see how this popup was set up in our step-by-step guide: https://wppopupmaker.com/guides/auto-opening-announcement-popups/

No Result
View All Result
  • Home
  • Technology
    • AI
    • Cloud
    • Telecom
    • Data Center
    • BPM
    • Blockchain
  • Finance
    • Banking
  • Cyber Security
  • View Points
  • Leaders Talk
  • News
  • Press Release
    • Submit Press Release

Copyright © 2025 CXOVoice - All Right Reserved