The company's biggest security hole lived in the breakroom

A corporate data breach occurred after threat actors discovered an internet-connected coffee machine on a secure network; the device had a default password and an outdated OS, and was used to exfiltrate sensitive data externally. The article uses this incident (and a similar 2017 fish-tank case) to illustrate how unmanaged IoT devices can bypass traditional defenses and urges changing defaults and better segmentation.