The FBI is looking into recent cyberattacks on water supply agencies. The big thing in common is a recurring theme: these various systems were attacked for using default passwords, or no passwords at all. Worse yet, some of these systems had no business being connected to the Internet. WHAT?!?!? Let this serve as a reminder to change all of your passwords from defaults or easy ones. This is a common problem across even government run or regulated industries, but that doesn’t make it right. Anything that connects to the Internet needs a new unique password, not something like 111111, or password, or default, or any words that come from a user manual.
Our critical utility infrastructure can make the same classic mistakes as we do with our everyday connected devices.
Source: Weak Passwords Just Exposed Our Water Supply to Iranian Hackers – CNET
