TECH NEWS

22-Year-Old IPMI Flaw Exposes 24,000 Servers to Offline Password Cracking

A server management feature designed to work when a computer’s operating system is unavailable is exposing password-derived authentication data on thousands of internet-facing systems, according to new research from Lava.

Researchers identified 36,872 publicly accessible Baseboard Management Controller (BMC) interfaces using the Intelligent Platform Management Interface (IPMI). Of those, 24,650 returned password-derived authentication data without requiring successful authentication.

BMC Access Gives Extensive Control Over Servers

A BMC is a small management computer built into a server’s motherboard. Administrators use it to restart machines, open remote consoles, install operating systems, update firmware, and inspect hardware, even when the main server is switched off or unresponsive.

Those capabilities make exposed BMC interfaces high-value targets. Someone who obtains valid login credentials may be able to control the physical server from outside its operating system, where endpoint security software has limited visibility.

SecurityProducts & Services

Lava traced the exposure to CVE-2013-4786, a...

Copyright of this story solely belongs to hackread.com. To see the full text click HERE

https://media.wired.com/photos/6a68b919fe9a62d3a152ba4b/191:100/w_1280,c_limit/Flow%20testing%20LDG%2044-7%20most%20productive%20pumped%20geothermal%20well%20in%20the%20US%20Zanskar.png

How to Bring a Geothermal Well Back from the Dead

Geothermal company Zanskar bought a New Mexico power plant in 2024 that appeared from the outside to be failing. The shallow wells had been rapidly losing heat, and the plant was having trouble generating power as a result. Now, after drilling a new well and operating the power plant for

https://cdn.mos.cms.futurecdn.net/TaxPLZc75WiicpmgZNzWzL-2560-80.jpg

Elevating the IoT: How AI is introducing a new era of connectivity

The global AI in IoT market has grown rapidly within the last year, with its value reaching $4.08 billion in 2025, and forecast to reach $6.45 billion by 2035. This progress reflects a wider industry shift, as with the rise of AI organizations are increasingly looking towards a

https://resiliencemedia.co/wp-content/uploads/2026/07/Agon-optimising-AI-for-an-intelligent-interceptor-drone-scaled.png

London-based Agon, which is developing sovereign AI training infrastructure for European defense, emerges from stealth with a $7M pre-seed and a $23M seed

Sponsor Posts Subquadratic: the LLM built for 12M-token reasoning — SubQ can reason across entire codebases and document sets in one pass with no RAG workarounds. Read how SubQ 1.1 Small holds near-perfect retrieval out to 12M tokens. Most carriers track everything. Cape doesn't. — Unlimited talk, text &

https://hackernoon.imgix.net/images/2jqChkrv03exBUgkLrDzIbfM99q2-9p822qf.jpeg

Why Your Next Trade After a Big Win Is Often the Worst

Think about the last time you booked a huge win. Now think about the trade you put on right after it. I'd bet money the second one was worse — bigger size, thinner logic, taken faster than usual. The same thing happens after a big loss. You've

BMC Access Gives Extensive Control Over Servers

Read more

How to Bring a Geothermal Well Back from the Dead

Elevating the IoT: How AI is introducing a new era of connectivity

London-based Agon, which is developing sovereign AI training infrastructure for European defense, emerges from stealth with a $7M pre-seed and a $23M seed

Why Your Next Trade After a Big Win Is Often the Worst