Mal wieder ein Beispiel für unprofessionelles Incident-Handling gefällig?

"Contacting vendor through ...; No response."
"Contacting vendor through ... and ...; No response"
"Asking for an update; no response"
"Asking for an update; no response"
"Escalating to BSI/CERT-Bund"
"CERT-Bund answers that GiroWeb does not want to establish a direct contact with us." 🤦‍♂️

(von der Fulldisclosure Mailinglist)