Tip Tuesday: the network printer is a more useful foothold than most IT teams expect.
Printers running an unauthenticated web management interface - accessible on port 80 or 443 - expose more than configuration settings. Stored scan-to-email credentials, LDAP bind accounts (frequently over-privileged relative to what the printer actually needs), and a populated internal address book are all common findings. On internal assessments, that combination regularly gives us a starting point for lateral movement without needing to exploit anything in the conventional sense.
The check takes two minutes. Put the printer's IP address into a browser. If you reach a management console without a login prompt, it's accessible to anyone on that network segment. From there, review what credentials are stored, set a strong admin password, and disable any legacy management protocols - Telnet and FTP in particular - that have no business being enabled on a modern device.
Small misconfigurations on overlooked devices tend to be exactly what gets used first.