1. Krebs' source was anonymous and he has not confirmed it to be the party responsible. 2. Ubiquiti is currently suing Krebs for defamation, and the lawsuit is

1. Krebs' source was anonymous and he has not confirmed it to be the party responsible. 2. Ubiquiti is currently suing Krebs for defamation, and the lawsuit is the source of the allegation that Krebs' source and the indicted person are one and the same. 3. Krebs' original article does report both sides of the issue, albeit with a scathing tone regarding UI's security disclosure practices. 4. Even if Krebs' source turned out to be the indicted individual, it is still ethical to avoid revealing the source. No one has been convicted. 5. It is generally not a smart move to apologize for an action that is at the center of an ongoing legal action, in any case.