IT department and auditors at major pharmacy chain got into a rip-roaring fight about using 'password' on Cisco firewall
Summary
An internal conflict arose within a major pharmacy chain's IT department and auditors regarding the use of 'password' as a default credential on a Cisco firewall. This disagreement stemmed from misaligned incentives between the teams.
IFF Assessment
FOE
The use of weak, default credentials like 'password' on critical infrastructure like a firewall represents a significant security lapse that defenders must address.
Defender Context
This incident highlights a common cybersecurity challenge where operational convenience or default configurations clash with security best practices. Defenders should advocate for strong password policies, regular credential audits, and proper configuration management, especially for network devices.