If one computer is not up to snuff – upgraded with all of the software upgrades, or if one device is not updated properly, or if one device still has the default password, then the defense is weak everywhere. because one system can cause the whole network to fail. Since the criminal hacker can take over this system and start to pick on the others in the network.
Once they have a system on the network then it is easier to get to the other systems.
we have to develop a new methodology to patch everything. Test first make sure it works, then implement to all systems.
It is imperative to do this, since the system that is the weak point will get attacked (Murphy’s law) and now the criminal hackers are in your network and the game has changed – another reason to have zero trust architecture (we have discussed this before).