CISO thought he had a 'r3@lg00dp@$$w0rd' but forgot to patch
ID: 05ef8c2d-2a46-5f93-9b08-ddba7f0cdee9
STIX ID: report--05ef8c2d-2a46-5f93-9b08-ddba7f0cdee9
Feed Name: The Register (Security)
Threat Score
A penetration tester found that a law firm failed to patch the BlueKeep RDP vulnerability, used it to access ~2,500 machines, and discovered passwords stored in plaintext — including the CISO’s weak password “r3@lg00dp@$$w0rd.” The article emphasizes the risk of unpatched, wormable RCE flaws and poor credential management, and recommends timely patching, 2FA, and encrypting/storing passwords securely.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.