On Conveying Doubt
Summary: Cisco Talos's Matt Olney described how the team publishes research during active incidents like WannaCry and Nyetya, when it must share findings before it is 100% certain, citing its Nyetya posts on whether paying a ransom would return data and on an actor possibly holding capability it had not yet shown. Talos said speaking with doubt means applying experience to incomplete information to extract actionable intelligence, and that it will flag speculation clearly so readers can weigh the information correctly.
Key Takeaway: Talos is telling customers that some of what they receive mid-incident is explicitly labeled as uncertain, which shifts the burden onto defenders to judge how much weight to give it while making time-sensitive decisions.
Read the original at Cisco Talos ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026