According to NSA and CISA, the worst cybersecurity misconfigurations include insufficient internal network monitoring, lack of network segmentation, and poor patch management. See the full list:
NSA and CISA Red and Blue Teams Share Top Ten Cybersecurity Misconfigurations
