Red Hat – Forcing Linux System Password Changes with the chage Command

Microsoft – User Must Change Password at Next Logon (LDAP Provider)

YouTube – NIST SP 800-171: 3.5.9 Allow Temporary Password Use

CIRT.net – Default Password Database

CMMC Level 2 Assessment Guide

Microsoft – Configure CMMC Level 2 Identification and Authentication (IA) controls

US-CERT – Risks of Default Passwords on the Internet

SANS Whitepaper – Vendor-Supplied Backdoor Passwords – A Continuing Vulnerability

Open Web Application Security Project (OWASP) – Testing for Account Enumeration and Guessable User Account

Open Web Application Security Project (OWASP) – Testing for Default Credentials