Ethiopia’s top-level cyber security agency used laughingly weak credentials to protect their email accounts. The database listed credentials for 300 email accounts and many of them were protected with passwords that a brute-force attack would find in a blink of an eye. The leak is the result of political instability in the country, which caused a reform at INSA that ousted “a number of key cyber-security agents”” INSA has reset the passwords and implemented some “”quick fixes”” that addressed “”some of the obvious security vulnerabilities
Source: security