Kevin Dominik KorteDefault Password on an internet-connected device ... US Utilities want to make it easy for attackers.
The more serious question is, with the Iranian CyberAv3ngers group acting somewhat in coordination with the Iranian government, when does an activist action become a state action and more closely an act of war? Given that the US has three carriers in striking distance and an election coming up, this could quickly turn into a hot mess.