⬇ Download holy card: ·
Saint TLStorm, Who Struck the UPS
Patron of uninterruptible power supplies, devices that update themselves, and forgotten TLS libraries.
Life
On 8 March 2022 Armis revealed TLStorm, a set of vulnerabilities in Schneider Electric's APC Smart-UPS. Some flaws were in the TLS library used to talk to the management cloud; another allowed malicious firmware to be loaded because the update was not properly signed. An attacker could literally make the power supply explode, or use it as a foothold in the network.
Prayer
O Saint TLStorm, who stirs storms where there should be calm, let our firmware be signed and our TLS libraries updated. Amen.
How to celebrate
Celebrated by installing Schneider Electric's updates and taking off the public network the devices that don't belong there.
Guard against the current, but mind you don't get the shock.