# Unpatched Windows 7 server gave tester control of factory network

- URL: https://talkfuse.com/story/admin-dropped-the-f-bomb-in-a-password-to-show-hackers-who-was-really-1337/
- Published: 2026-10-29T09:00:00+00:00
- Updated: 2026-10-29T09:08:25+00:00
- Original publisher: The Register
- Original article: https://www.theregister.com/security/2026/10/29/admin-dropped-the-f-bomb-in-a-password-to-show-hackers-who-was-really-1337/5306139
- Topics: Cybersecurity, Technology

## Key points

- An unpatched Windows 7 server opened the factory network.
- The administrator’s password was strong but real.
- Legacy systems can undermine other security measures.

## Summary

A penetration tester gained control of a factory’s network through an unpatched Windows 7 server connected to CNC milling machines. The administrator’s password was a strong, insulting message aimed at hackers, but it did not protect the network from a vulnerability in the outdated machine.

The company had been breached six months earlier and had disconnected many servers from its domain, limiting the tester’s options. One server remained connected and vulnerable to EternalBlue; credentials recovered from it included the administrator’s password, which turned out to be genuine. The account gave the tester full network control, underlining that patching and managing legacy systems mattered more than the password’s strength.

---
Summarised by TalkFuse (https://talkfuse.com/). Quote the original publisher for the reporting and link this page for the summary and discussion.