As cited
Copy frozen at (site build).
breaches incidents
IT department and auditors at major pharmacy chain got into a rip-roaring fight about using 'password' on Cisco firewall
A penetration tester discovered that a major U.S. pharmacy chain used the literal string 'password' as the enable password on an edge Cisco firewall, stored in the weak type 7 encoding that is easily reversible. When the finding was escalated as high-risk, the company's IT department clashed with auditors in a heated meeting, with the IT team downplaying the severity while auditors pushed for immediate remediation, later revealing that high-severity findings triggered bonus penalties for IT staff.
Why it matters: Pharmacy chains and other organizations should audit administrative credentials on internet-facing network devices immediately; weak passwords and misaligned incentive structures can delay critical security fixes and expose core infrastructure to compromise.
- Source published
- First seen by Cybersecurity Tracker