Data center infrastructure vendor Vertiv has introduced Vertiv OneCore, a fully modular data center building block design supporting AI and HPC applications intended to speed deployment of compute equipment in as little as one…

IT Security Nachrichten networkworld.com 25.08.2025, 17:37 Uhr 2 Min. Lesezeit KRITIS / Energie

↗ Quelle (networkworld.com)

Reagiere als Erste:r — dein Feedback zählt!

OneCore is a unified “slab-up,” factory-assembled, turnkey platform that integrates the company’s power, thermal, and IT infrastructure systems within a pre-assembled shell. Slab-up is a data center design where equipment—such as server racks and cabinets—are installed directly on a solid concrete slab floor, rather than on a raised floor system.

Vertiv says the design simplifies logistics, minimizes on-site labor and complexity, and supports consistent quality, cost, and schedule outcomes. Vertiv Unify, which assists Vertiv cooling, UPS, and power management equipment to connect to building and data center management, provides integrated system visibility and centralized management.

“Vertiv OneCore is our answer to the need for reducing complexity and enabling speed in building data center capacity at scale,” said Viktor Petik, senior vice president of infrastructure solutions at Vertiv in a statement. “We know the challenge isn’t just designing for today’s needs but building an adaptable foundation for the future. This solution reduces project complexity by standardizing key components while preserving the flexibility to scale and evolve, expand easily, and integrate new technologies as business and IT requirements evolve.”

In addition to the modular design, Vertiv emphasizes speed of deployment, claiming the platform can be commissioned at a rate of 1 MW per day and supporting up to 50 MW total. Power, cooling, and whitespace components are assembled offsite at the same time. Each OneCore block can scale from 96 to 944 racks within the 5 MW to 50 MW power envelopes.

Cooling is provided through a combination of liquid and air-cooled perimeter systems, with support for direct-to-chip liquid cooling through Vertiv’s CoolChip technology. It also supports Vertiv’s Trinergy advanced UPS system to lower PUE and energy use, and power and cooling can be tailored to each module’s IT load.

OneCore is backed by Vertiv’s global service organization, which provides customers with expert-led commissioning, proactive maintenance programs, and rapid response capabilities to support long-term performance, availability, and operational efficiency across the full data center lifecycle.

IR-PLAYBOOK-VULN-REMEDIATIONMEDIUM

Schritte anzeigen

SOC Incident Playbook: Vulnerability Remediation & Verification

Asset Inventory

Asset-Datenbank nach betroffenen Komponenten, Versionen und exposed Ports abfragen.

nmap -sV --script vuln -p- <target-network>

Exploit MonitoringSofort

SIEM-Regeln und IDS-Signaturen (Snort/Suricata) auf Angriffsversuche schärfen.

tail -f /var/log/suricata/fast.log | grep <cve>

Patch DeploymentSofort

Patch oder offiziellen Workaround gemäß Hersteller-Empfehlung einspielen.

Check Vendor Security Advisory Bulletin

1-Click Detection Engineering: Multi-Dialect SIEM Rules5 Formate

Regeln anzeigen

Syntax validiert (0 Fehler)

title: Detect Exploitation - Vertiv launches one-day installation package for AI data center systems
id: 2f1922ec-f4ab-4d13-a2db-1068db7b24d3
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-24
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access

Syntax validiert (0 Fehler)

rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-24"
        description = "YARA Signature for "
    strings:
        $str = "Vertiv launches one-day instal" ascii wide
    condition:
        any of them
}

Syntax validiert (0 Fehler)

index=security sourcetype IN ("cisco:asa", "pan:traffic", "zeek_conn", "suricata", "WinEventLog:Security")
("Vertiv launches one-day installation pac")
| stats count earliest(_time) as first_seen latest(_time) as last_seen by src_ip, dest_ip, dest_host, signature
| eval first_seen=strftime(first_seen, "%Y-%m-%d %H:%M:%S"), last_seen=strftime(last_seen, "%Y-%m-%d %H:%M:%S")
| sort - count

Syntax validiert (0 Fehler)

message: "*Vertiv launches one-day installation pac*"

Syntax validiert (0 Fehler)

CommonSecurityLog
| where Message has "Vertiv launches one-day installation pac"
| summarize EventCount = count(), FirstSeen = min(TimeGenerated), LastSeen = max(TimeGenerated) by SourceIP, DestinationIP, DestinationPort, Activity
| extend DetectionRule = "iShareStuff-CTI-Compiled"
| sort by EventCount desc

🎯

MITRE ATT&CK Matrix Navigator 14 Taktiken

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

💡 Tipp: Klicken Sie auf eine TTP, um Gegenmaßnahmen und SIEM-Erkennungsregeln anzuzeigen.Enterprise Matrix v14.1

🚀 Auf tsecurity.de entdecken

◀ VORHERIGER BEITRAG 1 Min

Happy birthday Linux!

Linux Tipps & Hardening

NÄCHSTER BEITRAG 1 Min

Wollten nicht länger warten: Bürger bauen 5 km langen Radweg einfach selbst

IT NachrichtenWeiterlesen ▶

Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen

Fokus-Vektor:

Kognitive Analyse für identifizierte Bedrohung: Erhöhte Bedrohungslage im Bereich Vertiv launches one-day installation pac.... Basierend auf 368k Vektor-Korrelationen werden sofortige Isolationsmaßnahmen für betroffene Endpunkte empfohlen.

🛡️ Angriffsfläche & Exposure

Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.

⚡ Empfohlene Sofortmaßnahmen

1. Perimeter-Inspektion: Relevante Portfreigaben und exponierte Endpunkte unverzüglich scannen.
2. Patch-Applikation: Hersteller-Hotfix einspielen oder betroffene Daemons in isolierte DMZ-Segmente überführen.
3. Telemetrie & EDR-Alerts: Prozessaufrufe und Child-Processes auf anomale Shell-Spawns überwachen.

🔗 Semantisch verwandte Zero-Days MariaDB 11.7 VEC

Schnell-Prompts für Analysten

⚠️ DEFANGED SANDBOX VIEW (tsecurity.de): Alle Netzwerkindikatoren und URLs wurden neutralisiert (2 Indikatoren entschärft). Nur zur defensiven Analyse!

Format: python

#!/usr/bin/env python3
# Exploit Title: PoC for Target
import socket, sys
target = '192[.]168[.]1[.]10'
url = 'hxxp://target[.]local/vuln'
s = socket.socket()
s.connect((target, 80))
s.send(b'GET / HTTP/1.1\r\nHost: target.local\r\n\r\n')