Well sure. Managed switches aren't a panacea, but the features they offer would have been a tremendous help towards mitigating this. At the least, the SWIFT dev

Well sure. Managed switches aren't a panacea, but the features they offer would have been a tremendous help towards mitigating this. At the least, the SWIFT devices (PCs, whatever) could/should have been on their own isolated subnet and VLAN, with all access to them being forced through a separate firewall. Even that wouldn't necessarily prevent a compromise but it would have been a helluva lot harder with little (relative) effort.