09/01/2021
Bon Jovi has Bad Medicine. Cybersecurity and Infrastructure Security Agency has Bad Practices -- only three:
1. Use of unsupported (or end-of-life) software in critical infrastructure.
2. Use of known/fixed/default passwords and credentials in critical infrastructure.
3. The use of single-factor authentication for remote or administrative access to critical infrastructure.
And, for each, they are extra bad if accessible on the internet.
Be smart. Keep your business safe. Mandate the use of supported software, good passwords, and multi-factor authentication.
As recent incidents have demonstrated, cyberattacks against critical infrastructure can have significant impacts on the critical functions of government and the private sector. All organizations, and particularly those supporting designated Critical Infrastructure or National Critical Functions (NCF...