In terms of damage, the worst and most damaging software in the Fujitsu network was called “Horizon”.
After the Horizon scandal, I have little surprise nor compassion that this has happened.
I know it's kind of unrelated to the topic at hand but damn that sent me down a rabbit hole.
All I'll say is:
Never attribute to malice that which is adequately explained by stupidity.
I don't think that statement can be reliably applied if you are doing infosec at a large company.
I think the statement was coined specifically for large companies.
I wonder it’s because of the no-responsibility effect, people try to not be responsible for some systems where there is risk but little reward/fame to be had. Don’t know if it has a name.
This gives rise to the following:
Any sufficiently advanced malice is indistinguishable from stupidity.
Here's another one. Any sufficiently advanced stupidity is indistingushable from malice.