NSA and CISA Red and Blue Teams Share Top Ten Cybersecurity Misconfigurations https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-278a

These are the bare minimum #infosec controls you've got to be on top of. Check that you have processes in place to avoid these mistakes! 

 @edbba727 It's unfortunate how much of this list boils down to "turned on a computer, was too tired or just plain too human to twiddle every knob immediately"… configurations really need to stop being default-open.