Put together an IR playbook — for your personal mental health and wellbeing
Summary: A Cisco Talos newsletter recounts the personal cost of the 2018 VPNFilter disclosure, a SOHO device botnet later attributed to Russian threat actor APT44 (Sandworm) that featured a kill switch capable of destroying infected devices en masse. Talos spent months reversing the malware while staying stealthy, and the author says the long hours and stress frayed relationships, cost him a people-management role, and left the team demoralized when a spike in Ukraine infections forced disclosure.
What's compelling: The author describes burnout from incident response as a career-altering and relationship-destroying cost, and asks security leaders to treat the aftermath of an event as a time to assess the toll on their people's health.
Read the original at Cisco Talos ↗
- Topics
- Threat Actors & Nation-State
- Related
- University of Texas at Arlington warns personal information stolen during cyberattack Cyber Risks · Nov 13, 2026Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Files Cyber Risks · Nov 13, 2026Hackers compromise 4,800 GitHub accounts to steal cloud credentials Cyber Risks · Nov 12, 2026