CISA urges vendors to get rid of default passwords

CISA warned that Iranian-linked hackers recently exploited static default passwords on Unitronics devices to impact multiple U.S. water facilities, and urged manufacturers to eliminate default credentials and adopt secure-by-design practices, including better open-source management and SBOMs to reduce supply-chain and device security risks.