Colonial Pipeline was Hacked Using a Single Compromised Password

The ybersecurity specialist who responded to the incident points out that the major cyberattack that shut down the main fuel pipeline in the United States was the result of a single compromised password, as Al Jazeera notes.   According to Charles Carmakal, senior vice president at the cybersecurity firm Mandiant, part of FireEye Inc, the hackers gained access to Colonial Pipeline Co's networks on April 29 through a VPN account that allowed employees to remotely access the company's computer network. He explained that although the account was no longer in use at the time of the attack, it could still be used to access Colonial's network.  The password was later discovered in a pi...