5 ms·
It's still very early, we won't have breach notifications for a while since any attacks would have started in the last few weeks at the earliest, and most would
by staticassertion 5y ago
It's still very early, we won't have breach notifications for a while since any attacks would have started in the last few weeks at the earliest, and most would have started last week.
- cmelbye 5y agoIt’s possible that it was exploited before the issue was widely discovered, right? I thought it had been in there for a while.
- bostik 5y agoIIRC Cloudflare said the earliest they had seen this being exploited in the wild was very early December, but the volume went up after Friday.
- staticassertion 5y agoIt's entirely possible and it's still so early that we're still guessing. But so far some companies have come out to say that they've seen exploitation only as early as a few weeks ago. Companies likely only started IR in the last week. Breach notifications, which only a minority of companies will bother to send out, will be a few weeks away at the earliest.