Investigators have uncovered that ransomware operators gained access to Colonial Pipeline Co. via a VPN account that was no longer regularly used and didn’t have two-step verification enabled.

Read full article on bankinfosecurity.com