CEO Blount tells Senators One password allowed hackers to disrupt Colonial Pipeline

Colonial Pipeline Chief Executive Joseph Blount, told senators that hackers who launched last month’s cyber attack that disrupted fuel supplies to the U.S. Southeast were able to get into the system by stealing a single password. The attack occurred using a legacy Virtual Private Network (VPN) system that did not have multifactor authentication in place. That means it could be accessed through a password without a second step such as a text message, a common security safeguard in more recent software.  “In the case of this particular legacy VPN, it only had single-factor authentication,” Blount said. “It was a…