Not in the article but the login for the breached account was in an infostealer dump, the engineer installed a Robolox mod his home PC.. which he also used for work.

[atanase@mastodon.social]

@GossiTheDog

[nocturnalnessa@infosec.exchange]

@GossiTheDog are companies blaming ai for breaches to duck responsibility for security mistakes that were definitely made, like how theyre blaming layoffs on ai to try and present an optimistic spin to investors? how much of the impact of ai, would you say, is actually substantial, vs just... that

[technicaladept@techhub.social]

@GossiTheDog "Robolox" tee hee

[nocturnalnessa@infosec.exchange]

@GossiTheDog my brain is like very fried so im worried that question sounded ironically robotic but my brain is fried but im trying to make it soak something in

[theorangetheme@en.osm.town]

@technicaladept @GossiTheDog Mmmm a nuts and bolts bagel with robolox and sweet light schmear.

[tiraniddo@infosec.exchange]

@GossiTheDog is Mythos going to be the new go to excuse, after no one believed that they were hit by an "Advanced Attacker"?

[jtig@infosec.exchange]

@GossiTheDog They did a Lastpass, i see

[dzwiedziu@mastodon.social]

@GossiTheDog
Ah, so not only very dumb, but also regular dumb.

[reqa@digitalcourage.social]

@tiraniddo "mythical attacker" - upcoming model names: legend and epic.

[gossithedog@cyberplace.social]

lol, the company is trying to blame AI. I have the stealer logs.

[gossithedog@cyberplace.social]

Cyber incident response guide for comms updates, 2026 update

[infoseepage@mastodon.social]

@GossiTheDog

The claim: "We have amazing best practices and this was strictly due to advanced AI hack tools. Who could blame us in this emergent threat environment?"

The reality: "A critical employee was being a dumbass and playing kid's games on his work machine. We let him."

[neurovagrant@masto.deoan.org]

@GossiTheDog i hate this fucking timeline

[awkwardturing@infosec.exchange]

@GossiTheDog "got further access through their enumeration"

Ha!