It doesn't, that much.
The problem really is for the defenders that are half-assing their defensive strategy or putting in "good enough" controls. It basically eliminates any leeway or grace period defenders might have between initial compromise and lateral.
I've been on exactly one engagement that I think would be in good shape against this kind of threat, and that client literally implemented every suggestion in our report from the previous year to the letter.
Basically, this is just going to make doing the basics properly (notably, asset management, patch management, and network segmentation) a harder requirement for doing business than it previously was.
Rob O :verified:
npub1hq…gpxge
2026-08-14 14:41:22 UTC
in reply to nevent1q…m2rr
Author Public Key
npub1hq3hx0nkk5l2gtp3ec00q9sf64pyxzvma9tkxg5350qt2qljfgqssgpxgeSeen on
wss://relay.momostr.pinkPublished at
2026-08-14 14:41:22 UTCEvent JSON
{
"id": "3b08ca00b44ddfdc9bdcab342c180ed70c40286a760d70fd86bcbb3741044633",
"pubkey": "b823733e76b53ea42c31ce1ef01609d54243099be957632291a3c0b503f24a01",
"created_at": 1786718482,
"kind": 1,
"tags": [
[
"p",
"35608a733ab74cb4dff03dd1387e47cf87d280d9bbb1d3df8e1d41384ac6a92f"
],
[
"e",
"3ac6006a0d6875e96138278dc0899ac84c525964397325998e164117976bf341",
"",
"root",
"86b397086a130510861dd58f255fadeee1c47815185fa3bb628a06b4d6af31ac"
],
[
"p",
"b823733e76b53ea42c31ce1ef01609d54243099be957632291a3c0b503f24a01"
],
[
"e",
"7420812a6a82d6980a89d5df126940d1b55e6ae1f8863c345ac0883764bd9082",
"",
"reply",
"86b397086a130510861dd58f255fadeee1c47815185fa3bb628a06b4d6af31ac"
],
[
"p",
"412ae8058d1f778375f59608086c88a96cf8ee6afcbe41949f2ea93afa709363"
],
[
"p",
"86b397086a130510861dd58f255fadeee1c47815185fa3bb628a06b4d6af31ac"
],
[
"proxy",
"https://infosec.exchange/@nerdpr0f/117094382489074554",
"web"
],
[
"proxy",
"https://infosec.exchange/users/nerdpr0f/statuses/117094382489074554",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/nerdpr0f/statuses/117094382489074554",
"pink.momostr"
],
[
"-"
]
],
"content": "It doesn't, that much. \n\nThe problem really is for the defenders that are half-assing their defensive strategy or putting in \"good enough\" controls. It basically eliminates any leeway or grace period defenders might have between initial compromise and lateral. \n\nI've been on exactly one engagement that I think would be in good shape against this kind of threat, and that client literally implemented every suggestion in our report from the previous year to the letter.\n\nBasically, this is just going to make doing the basics properly (notably, asset management, patch management, and network segmentation) a harder requirement for doing business than it previously was.",
"sig": "740964afdf290edf1d1c626d43340ef12201eb46a47715637c16ae665464825b472b63115c698f57760eb8c6423cbdd1ccd3ab0547cba75d4e9ec4116870c332"
}