With the Fireeye breach news coming out, it's important to remember that no one is immune to this. Many security companies have been successfully compromised over the years, including Symantec, Trend, Kaspersky, RSA and Bit9 1/
Security companies are a prime target for nation-state operators for many reasons, but not least of all is ability to gain valuable insights about how to bypass security controls within their ultimate targets 2/
The biggest news here for me is the admirable standard that Kevin Mandia and @Fireeye team is setting in rapid and transparent disclosure of the intrusion, as well as release of red team tools stolen by the adversary 3/
That will go a long way to mitigating the potential impact of this intrusion for organizations all over the world. I've always believed that what differentiates a devastating breach from a minor headache is the quality of response (not just IR itself but comms, etc) 4/
.@FireEye has so far set a new high standard for disclosures and they deserve big kudos for this. I hope other companies will learn from their experience 5/5
• • •
Missing some Tweet in this thread? You can try to
force a refresh
