"Password1’ is not an appropriate password" - a warning from the Information Commission's Office in a reprimand to a two Welsh organisations following a ransomware attack which resulted in data about thousands of people being stolen.
I think this serves as a timely reminder that for all the talk of the danger around *sophisticated AI-powered attacks* and the like, none of it really matters when there are so many businesses out there which, for whatever reason, are still not putting even the most basic cybersecurity defenses in place.
Because why would an attacker need an advanced tool to break in to something if the door is just unlocked anyway?
