They should at least say (unless too revealing) how they are going to determine the initial access vector used in this campaign. E.g. say a dedicated team is b

They should at least say (unless too revealing) how they are going to determine the initial access vector used in this campaign. E.g. say a dedicated team is being financed with $xM. E.g. say that they are setting up honeypot devices to capture the initial vector. E.g. say that code is having a complete external audit and fuzz. I'm not a security expert but if I were a customer I would be pretty dissapointed in the timeline so far and very dissappointed in their respose. It looks like the vulnerabilities fixed only prevent the Line Runner malware reinstalling itself on boot. And nothing is done about Line Dancer.