by Brandon Butler
Hacked water plant used shared passwords and Windows 7 2/14/2021

Dan Goodin with Ars Technica has a follow-up on that water plant incident from last week:

According to an advisory from the state of Massachusetts, employees with the Oldsmar facility used a computer running Windows 7 to remotely access plant controls known as a SCADA—short for “supervisory control and data acquisition”—system. What’s more, the computer had no firewall installed and used a password that was shared among employees for remotely logging in to city systems with the TeamViewer application.

That’s not good. City officials think it was a former disgruntled employee.