Matthew RosenquistFounder & CISO Advisor, Cybersecurity Insights · CISO, Cybersecurity Strategist, & Industry Advisor

FireEye Hacked – A Stark Reminder of Cybersecurity Risks

10 Dec 2020 · 3 min

Watch on YouTube

2:53

In this commentary, the speaker acknowledges that even elite cybersecurity firms like FireEye can be breached, despite their world‑class people, processes, and technology. He frames the incident as a stark reminder that cybersecurity is about managing risk against intelligent, well‑resourced adversaries rather than achieving absolute immunity. While congratulating the attackers on their skill, stealth, and patience, he emphasizes that the breach will not crush the security community. Instead, he calls for FireEye to implement mitigation measures, share forensic findings, and for the broader industry to learn from the exposed red‑team tools. The breach is portrayed as a catalyst that can break complacency, accelerate adaptation, and ultimately strengthen collective defenses.

Chapters

Even the best security organizations can get hacked. FireEye has some of the best people, processes, and technology of any cybersecurity company. Uh, in fact, they specialize in helping their clientele defend themselves from the most capable threats. And I consider them a top-tier organization. The fact that they've been hacked and their red team tools have been exposed? Well, it's a stark reminder that cybersecurity is an industry of managing risks, not eliminating them. In fact, no modern digital organization is impervious to compromise. It's because cybersecurity is an adversarial endeavor against intelligent, creative, capable, and sometimes well-resourced adversaries. To the attackers, congratulations! And I say that with all sincerity. I mean, you've successfully compromised one of the hardest targets one of the best with tremendous skill, stealth, and patience. That's no easy task by any measure. You have won the day, but you have not crushed us. The security community will learn and improve. FireEye is already putting mitigation measures in place. For the misuse of those stolen tools. And I expect them to also share the forensics findings of the attack so that the entire industry will understand the tactics and the tools to be better prepared. If anything, you have emboldened us to learn and improve, to rise to the occasion to be better collectively as an industry to improve cybersecurity. And sometimes it just takes a nudge to break the complacency, to upturn the stale practices, and to accelerate adaptation. So know this, the passion and the focus endures. Tomorrow is another day, and we all look forward to seeing you on the battlefield.