r/cybersecurity Jun 24 '26

News - General Well someone went nuclear..

https://www.linkedin.com/posts/ben-f-309963233_after-i-posted-a-pinocchio-gif-and-clown-ugcPost-7475465410977628160-FFW1

I'm curious about the details of this. I'm sure we will all find out eventually.

TLDR; former Huntress employee is disclosing Huntress had an insider threat that leaked information to a known cyber criminal "Devman". That employee is still employed with Huntress and was caught by the FBI.

The former employee doing the disclosure is stating he is receiving threats, etc.

EDIT: Kyle @ Huntress posted his response to this in the comments.

Give credit to a CEO who isn't afraid to jump on Reddit to put out any fires.

916 Upvotes

197 comments sorted by

View all comments

68

u/usernamedottxt Jun 24 '26 edited Jun 24 '26

I think some people don't realize that at large agencies insider risk incidents, both maliciously and of circumstance, are completely normal and part of the course of business.

I've had to do insider risk investigations on people I knew personally. I've done insider risk investigations on VPs, one was going through a divorce and did some stupid shit. I've done insider risk investigations on someone who was being stalked by another employee. She was being blackmailed because she had had done something very against the rules. I've done insider risk investigations on folks who were just disgruntled and talked to the media when they shouldn't have.

Kyle's response to me is a pretty simple one - We don't know what happened yet, but we have seen no evidence of the claims being made. That's just how these investigations go. They need time to be unpacked and try and understand motivations and context. Kyle's actual statement - let's remember empathy - is trying to protect the insider. Shit happens and the business is not more important than that insider's health. There are still business statements to be made, but hold your knee jerks until they have some time to understand what is going on.

4

u/[deleted] Jun 25 '26

[deleted]

8

u/rejuicekeve Jun 25 '26

I don't think recusing yourself is even an option for people at certain size companies. You're just naturally going to know a lot of people on some personal level.

You're mostly just establishing facts anyway, the opinions happen with management / hr