Claim

Saudi Aramco cyber-attack (2012) INVOLVES default usernames and passwords

Attackers briefly regained access because some perimeter security appliances retained default usernames and passwords.

Episode
EP 30 — Shamoon
Origin
Explicit
Confidence
98% (extractor score, not a fact score)
Speaker
Chris Kubecka
Attributed source
—

Transcript evidence

“had left some of the stuff with default usernames and passwords on the network and security appliances”

Chris Kubecka · offsets 26501–26603

Read the official transcript

Extraction provenance

Model gpt-5.6-luna · prompt 1.5.19 · schema 1.5.19 · 2026-09-13T05:29:42.732075+00:00

claim:ep030:369e76c4ba32