Post #4450390
2026-08-08 22:29 UTC
@bob_zim@infosec.exchange @briankrebs@infosec.exchange Really? They should've what, known about the 0days beforehand? Go watch the full talk.
Replies (1)
-
@bob_zim@infosec.exchange 2026-08-08 23:03
@Dss@infosec.exchange @briankrebs@infosec.exchange They should have taken even the barest of steps towards securing an environment. Telling the software not to misbehave isn’t a security control. Don’t use default credentials. Don’t allow untrusted software currently under test to access a network at all. Maybe take a look at the environment of the software under test more often than once a week. The flagrant disregard for the most basic security practices means either they’re either idiots or hucksters. I don’t see a third option. And to claim “We didn’t know this thing we built would go out and do felonies on behalf of our company”? Really? Then why did they give it the capability to do that?