If a USG entity buys an exploit from VUPEN, it's to write an Einstein sig for it.
-
@msolnik@ncardozo@daveaitel I disagree. You get in with the most public thing you can get in with.
IMHO VUPEN bugs aren't disclosed widely enough for non-attrib benefits. exploit-db, MSF, yes.
-
-
if you can pay 100k for an exploit that gets you on a target and doesn't expose your vulns, why not?
-
As an IR analyst, would love that signal. Informs severity of incident, assists in attribution.
- 1 more reply
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.