Post

THREAD: When @thekrebscycle.bsky.social and his workplace, @sentinelone.com, were singled out by Donald Trump on Wednesday, I thought it was an opportunity to weigh the cybersecurity industry's rhetoric against their real world actions.

Krebs is at every other conference. His leadership of CISA, his novelty socks, his pineapple pizza jokes, and his dramatic Nov. 2020 standoff with Trump have all contributed to making him something of a cyber mascot. The typical journalistic cliche is "widely respected."

As for the industry, it often casts itself as fighting to defend democracy from election hackers & foreign disinfo. Surely punishing Krebs for defending the truth about America's elections - and punishing @sentinelone.com for the 'offense' of having hired him - would draw public indignation, right?

Well, turns out not so much. Let's start with Krebs' former employer, Microsoft. Microsoft's President Brad Smith told Congress in 2021 that: "There is no value that is more fundamental and timeless in our country than our commitment to democracy." blogs.microsoft.com/on-the-issue...

Microsoft's response yesterday to the news that their former exec had been blackballed by the president? "Nothing to share at this time."

I asked Alphabet's Google for their response. Bear in mind that CEO Sundar Pichai boasted in 2021 of driving users toward the CISA website "that debunked incorrect claims made about the integrity of the elections" - the same site that is now at the center of Trump's attack on Krebs and SentinelOne.

(Here's Alphabet CEO's Pichai's testimony: blog.google/outreach-ini...) His company's response? "We don't have anything to share at this time."

Together with @ajvicens.bsky.social I asked a total of 31 other cyber companies to weigh in on the attack on their peer (33 when you count Microsoft and Google). Tenable: "Unfortunately we're not able to offer comment for this story." Okta: "Nothing substantive to on our end to add"

Secureworks (recently acquired by Sophos): "Unfortunately, we can't comment on this one." Qualys: "We don't have a comment on the issue." Fortinet: "We're unable to meet your deadline." F5: "We're not going to be able to help with this one."

And then there were those who simply didn't offer anything in response: Akamai, Cisco, Cloudflare, CrowdStrike, Deloitte, Dragos, Gen Digital, IBM, Palo Alto Networks, SailPoint, Recorded Future, Arctic Wolf, EY, PWC, Leidos, CyberArk, CommonVault, Varonis, Rapid7, Booz Allen (among others).

The Cloud Security Alliance - which counts @sentinelone.com as a member! - declined comment.

Finally, I should call out the ONE organization we found that did express support for Krebs & @sentinelone.com, the Cyber Threat Alliance. Here's what their president, Michael Daniel, told @ajvicens.bsky.social:

Our story here: www.reuters.com/world/us/cyb... And if you know anything about what's going on at SentinelOne (or any other cyber company, or CISA itself) in response to this memo, please let me know. Reachable here, via Signal on: raphaelsatter.01 Other ways to reach me here: raphae.li