Finding And Exploiting Bugs In TLS Libraries Used By “Smart” UPS Devices by Yuval Sarel and Gal Levy

This talk explores the emerging vulnerabilities in smart uninterruptible power supply (UPS) devices that are increasingly connected to the Cloud. The speaker, Yuval Sarel, a security research team lead at Armis, details several zero-click preauthentication vulnerabilities identified in a leading UPS vendor, as well as the physical threats associated with managing sensitive battery-powered devices. The session includes a demonstration of an attack that can have catastrophic consequences, highlighting the pressing need for cybersecurity awareness in the face of evolving technology.