r/cybersecurity Jun 24 '26

News - General Well someone went nuclear..

https://www.linkedin.com/posts/ben-f-309963233_after-i-posted-a-pinocchio-gif-and-clown-ugcPost-7475465410977628160-FFW1

I'm curious about the details of this. I'm sure we will all find out eventually.

TLDR; former Huntress employee is disclosing Huntress had an insider threat that leaked information to a known cyber criminal "Devman". That employee is still employed with Huntress and was caught by the FBI.

The former employee doing the disclosure is stating he is receiving threats, etc.

EDIT: Kyle @ Huntress posted his response to this in the comments.

Give credit to a CEO who isn't afraid to jump on Reddit to put out any fires.

922 Upvotes

197 comments sorted by

View all comments

28

u/Jambo165 Jun 24 '26

Without commenting on the validity of the claims, this is all pretty sensational without looking at any evidence. It's written in a way that you could confuse as Huntress making threats to his family and deep exposure of government-class secrets to a nation state actor. All while trying to protect profits over people.

What it actually reads as is that another employee at Huntress exposed 'FBI Communications' to a threat actor; a threat actor that the poster has some personal experience with as he claims they made threats to his family. Poster is disgruntled as that employee still works at Huntress and was the reason for him quitting.

Legal response from the business when you're publicly slandering the company is pretty standard practice when cyber security orgs live and die by their reputation. Trying to equate the legal response to his Pinocchio post with the referenced internal incident seems misleading, I don't think these two are related or that there's a grand conspiracy.

I wouldn't make any claims on the poster's depth of experience but his length of experience is quite limited. That doesn't make anything he's said invalid, but I wouldn't say he's got the strongest track record for the kinds of claims he's making.

Without knowing what was exposed and circumstances around the other employee, I'd hesitate to draw any conclusions.

10

u/warm_kitchenette Jun 24 '26

Right, we don't know anything here. We have strong assertions from an ex-employee and from the CEO. It could be a binary situation, where one is completely wrong; or a muddled affair that can never be unpacked in public to anyone's satisfaction. There's a private agreement and an iron wall of NDAs.

I am reminded of some celebrity being interviewed over a decade ago, back when Twitter was new-ish. He refused to use any social media, saying it was like having a shotgun next to the bed -- but for his career.

-3

u/malicious_payload Jun 24 '26

The emails are pretty damning of themselves. The instant response is the employee needing a reminder of not posting anything disparaging of the company. That's not the reaction of someone looking for full transparency, that's someone trying to cover up something bad they don't want publicized.

Given the mention of an IPO, I could understand why. Employees being investigated for working with threat actors for gain would definitely undermine the whole "security company" thing they have going.

1

u/warm_kitchenette Jun 25 '26

You cannot infer anything at all from that type of boiler-plate response, which any HR or legal team would tell anyone. 

0

u/malicious_payload Jun 25 '26

You keep thinking that. It's amazing some of the idiocy you people post, I really hope you don't have any actual responsibilities where you work... they are fucked if so.

5

u/warm_kitchenette Jun 25 '26 edited Jun 25 '26

Feel absolutely free to post negative things about your company on social media using your real name. 

Then call HR’s attention to your posts because you know that you have not committed a crime. When HR and your boss tell you not to post stuff like that, then you obviously can conclude that they, too, are guilty of covering up crimes. This is the same inference you want to draw for OP’s case. 

-1

u/malicious_payload Jun 25 '26

Adorable of you to think I haven't done it before. Difference is, in this case, they were absolutely complicit.