Security Vendor Incident Self-Disclosure

Security companies publishing accounts of attacks on themselves, where the disclosure is both incident report and control endorsement.