CISA hacked CNI through forgotten web shell from previous engagement

Meanwhile... "leadership deprioritized the treatment of a vulnerability their own cybersecurity team identified".