The cyber attack on Saudi Aramco compromised the CEO's email address and password, and it was found out that some of the security appliances were left with default usernames and passwords on the network.