3 ms·
possibly the WordPress install did not use a dedicated db user/password - its possible that the root user and password was used.
by walshemj 9y ago
possibly the WordPress install did not use a dedicated db user/password - its possible that the root user and password was used.
- graystevens 9y agoGood point, the report calls out that the root password for 40+ servers was the same, and that a large number of employees knew or used it. Seems sensible to transfer that same mentality across to other sensitive accounts.
- walshemj 9y agoOuch having worked at BT our internal security would have had afield day with that - but Mobile telecoms where always considered much weaker technicaly.