3BB Hands Out Root Access Again

Here we go again with telecoms provider 3BB, whose internal infrastructure and unlucky subscribers just had credentials and network telemetry harvested by cheeky intruders. The trespassers granted themselves root access using an open-source MeshCentral remote management tool planted neatly as a backdoor. To keep our own systems from suffering a similar indignity, one supposedly needs to address network security flaws and stop leaving administrative tokens around to be compromised. Why do we bother locking the front gate when everyone leaves the administrative backdoor wide open?