A claimed source-code compromise at a security vendor. Code is not a signing key — but it is a map of the detection logic.
Four vendors, one campaign. Largest attack surface, least visibility, highest trust — and both states and criminals use the same door.
Neither actor wanted the vendor. Both wanted what the vendor holds about everyone else — the same reach as a thousand intrusions, from one operation.
Source code is not a signing key. A vendor’s list of known-but-unpatched flaws is a queue of working zero-days with the analysis done.
A firewall configuration describes the network behind it and carries the keys. Reconnaissance completed in advance, for every customer at once.
Platform, vendor and customer each secured what they controlled. The token that crossed all three belonged operationally to nobody.
The devices behave as specified. The specification assumed the network could be trusted.