Something shocking to me happened today at the Seattle/Bellevue Cybersecurity Summit during one of the panel discussions. The speaker asked, by show of hands, how many in the room had an incident response plan. About half the room raised their hands. They then asked by show of hands how many people have tested that plan. About 50% lowered their hands. (Myself included, I will admit. But I have a 3rd Party IR tabletop scheduled for this year.)

What this ultimately means is that only half of large and small companies have a response plan for a security incident. And half of those don't know if their plan will work or not.

So WHEN a cyber attack happens, there is a fair to good chance that the victim organization won't be able to contain or remediate the threat, which can ultimately lead to a data brea- I mean... decentralized surprise backup.

Let that sink in...

This morning I noticed a #passwordspray #attack coming from [50].[116].[36].[236] (tiprnet[.]net) which resolves to #godaddy and #akamai. GoDaddy was more than happy to work with me.

Akamai on the other hand only advises that I block the IP. The tech on the phone confirmed that they will NOT take action against the threat actor because we are not a customer. Are you kidding me? So, I repeated, and asked them: "so you are telling me that because I am not an akamai customer, akamai refuses to take action against a threat actor using their infrastructure?" The tech chose his words carefully but confirmed by stating that the security team is restricted on what they can do if we are not a customer.

Come on akamai... Really?!?!?

@PogoWasRight That I don't know. Some of the email addresses don't look like they are monitored very heavily based on the email address itself, but I hope at least a few of them reached out.

And thank you kindly! I gladly carry the guidon.

I have 2 pillars in business, honesty and transparency. And I at least TRY to force those pillars on my vendors too. Hence why I'm pressuring them to both reach out to all of the SMB clients and fix their mistake. I am also hustling too, but haven't said anything about that in the thread. I am trying to get everyone involved a free license extension or something as a token of good faith from Fortinet. I don't think they will end up doing that... but we will see.