DOD Just Beginning to Grapple with Scale of Weapon Systems Vulnerabilities
The good stuff is in the PDF:<p><a href="https://www.gao.gov/assets/700/694913.pdf" rel="nofollow">https://www.gao.gov/assets/700/694913.pdf</a><p>- Running a port scan caused the weapons system to fail<p>- One admin password for a system was guessed in nine seconds<p>- "Nearly all major acquisition programs that were operationally tested between 2012 and 2017 had mission-critical cyber vulnerabilities that adversaries could compromise."<p>- Taking over systems was pretty much playing on easy mode: "In one case, it took a two-person test team just one hour to gain initial access to a weapon system and one day to gain full control of the system they were testing."