Cyber Risks · Cisco Talos

We've got one word for it, and it's usually the wrong one

Summary: In this Cisco Talos Threat Source newsletter, the author argues that "burnout" is the wrong word for most of what the security industry does to its people, and lays out four distinct injuries: burnout (exhaustion from chronic workload that eases when the load eases), secondary traumatic stress (absorbing someone else's trauma, as a CTI analyst exposed to dark web material might), vicarious trauma (years of other people's worst days changing your beliefs rather than your mood), and moral injury (damage from being made to act against your own values or stopped from doing what you knew was right). The same newsletter reports that Talos investigated a WebDAV infection chain at a Ukrainian government organization, attributed with moderate confidence to a Russian actor tracked as UAT-10820, delivering the Amatera stealer plus ZigCryptoStealer and NetSupport Manager, and notes Microsoft's September 2026 Patch Tuesday covered 973 vulnerabilities, 113 rated critical.

What you should know: The author's point is that one word covers four injuries with four different fixes, and that cybersecurity is immature compared with medicine, the helping professions and social work in understanding what the work costs the people doing it - so the people on your team owning outcomes but not decisions may be carrying damage your organization has no language, and therefore no response, for.

Read the original at Cisco Talos ↗

Topics
Malware
Related