After $380M hack, Clorox sues its “service desk” vendor for simply giving out passwords Massive 2023 hack was easily preventable, Clorox says.

Yikes!

Cybercriminal: I don’t have a password, so I can’t connect.

Agent: Oh, ok. Ok. So let me provide the password to you...

#identity101 #mfa #identityProofing #accountTakeOver

arstechnica.com/security/202...