Is it bad to have a major security incident on your résumé? (Seriously I don’t know)
Summary: A Cisco Talos newsletter raises the question of whether security hiring managers stigmatize candidates who worked at organizations during major breaches, citing a TechCrunch Disrupt panel where Microsoft's Sherrod DeGrippo said she views such experience as frontline work. The same newsletter reports Qakbot operators running a phishing campaign since early August 2023 distributing Ransom Knight ransomware and the Remcos backdoor, and Progress Software disclosing eight vulnerabilities including CVE-2023-40044, an unauthenticated deserialization flaw in WS_FTP Server's Ad Hoc Transfer module.
What's compelling: The newsletter notes that several major security firms have recently had layoffs or shut down even as the field cites a skills gap, so a hiring norm that penalizes candidates for a breach they lived through removes exactly the people who have been under fire. Separately, Qakbot's spam delivery kept running after the FBI seized its command-and-control servers in late August, which means a takedown headline is not the same as a stopped operator.
Read the original at Cisco Talos ↗
- Topics
- Supply Chain & AppSec
- Related
- Kitesurf is now open source Cyber Risks · Nov 13, 2026Trained to betray: How post-training supply chain attacks hijack coding agents Cyber Risks · Nov 12, 2026ZDI-26-913: (0Day) Meta fairseq load_audio_path Code Injection Remote Code Execution Vulnerability Cyber Risks · Nov 11, 2026