If you work in information security or threat intelligence… *publicly* and *repeatedly* dunking on cyberattack victims isn’t cool. If it’s your role and responsibility to defend people, turning around and making fun of others is not okay. It comes across as malicious, bitter, and petty. We’re all in this together. There’s a time and place for constructive criticism. Everyone is entitled to their own opinions. Many of your concerns are valid. They’re especially impactful if they’re expressed in an appropriate way. There’s also a time and place for memes. Trust me, I get it. The ~irony~ of certain situations makes it almost impossible not to laugh. (Or, facepalm.) Be tasteful and show good judgment. I’ve sometimes seen the above manifest in something that can only be described as a mean-spirited and spiteful celebration of someone else’s misfortune. It’s inconsiderate and unsympathetic. Don’t encourage or engage in victim blaming. We’re all vulnerable. You might revel in schadenfreude today, but find yourself the victim of a compromise tomorrow. Cyber karma is real. It really does feel like some of y’all are rooting for the adversary at times. It’s a bad look. It’s not cool and I don’t want to see it. Just an observation over the past few days. (To be clear, this applies to the minority of researchers. That minority can be really loud sometimes. In my experience, there are so many more people in this industry who are kind, decent, and professional. You are appreciated and valued.)