46. Despite warnings from Exegy’s counsel about the legal risks involved in such a course of action, on February 25, Mr. Walters chose to make a public statement on LinkedIn, a professional networking site, disparaging Exegy officials, including myself, and claiming that we 1) were allegedly facing security vulnerabilities, and 2) had attempted to extort him.
This statement doesn't claim who all felt like they were disparaged against and makes it sound like it was many people, when in reality the post only included David Taylor and Patrick Sellers.
You would think these other “Officials" would have submitted Affidavits to the court as well. David Taylor is being manipulative to the court by making it seem like a lot of people.
My post was about what a security researcher could through when reaching out to a company without anything in place for people wanting to disclose vulnerabilities in their infrastructure.
I actually posted all my evidence on where Exegy tried to extort me and I was allowing the people decide what they thought about it and ask questions.
My accusations were based on facts and evidence, so the public wasn't being misled and could look it all over.
I was never disparaging anyone, but stated I found it interesting how FOW could name David Taylor CEO of the year, because someone in a leadership position should never try to extort someone using manipulative and deceiving tactics.
The exact wording I used was “It interesting how could name FOW as CEO of the year, since I would never think a person in a leadership position would ever try to extort someone with manipulative and deceiving tactics.”
You can read over that post
47. Seemingly for no other reason than to increase the harm done by the post, Mr. Walters also sent a link to his allegations to at least twelve current Exegy employees.
There is nothing wrong with reaching out to prior work colleagues and friends at a company I used to work at. I wanted them to be aware of what was going on but not jump to conclusions
The email I sent friends of mine and previous work colleagues
I even stated the following things in my email to them
Before anyone comes to any kind judgment, I ask you to fully read over all documents that I have attached to the post as it shows many different things that can happen.
Please do not speak ill of and inveigh against Exegy and any other parties involved, as I would like to keep the post as professional as possible.”
48. Mr. Walters soon moved from merely drawing attention to his posts to requesting that Exegy employees share confidential internal communications and other information with him, in contravention of the employee handbook’s warning against such disclosure.
This is a deceitful statement and makes the court believe I was acting maliciously and most likely makes the court wonder what all I might be asking them. You would have thought David Taylor would have been honest and stated the facts where his employees reached out to me regarding an email Exegy sent out and I just asked for a copy of it.
Though they would rather portray me as a terrible person and make the court wonder what things I could be asking, you will see from this evidence it was just an innocent question asking for a copy of that email and I didn't try pushing or persuading them after they reached out to me stating the following things
Company wide email, have no further contact. Report all attempts of contact
Been told not to respond.
I am not allowed to communicate with you at all in any form
I asked two of them for a copy of that email but one of them stated they didn't want to get fired and the other didn't respond at all
You can see my email on February 25 to Kristen Mathews regarding these text messages
If they want to classify the KnowBe4 as internal communications it really is not and I got it from another friend somewhere else, plus you can search “X-PHISHTEST” on google to find examples of it online.
This was also not a vulnerability but a flaw in their misconfiguration that is outlined in KnowBe4 documentation for using their service.
Kent, who worked as Director of IT for Exegy stated the following “In view of this I would suggest you submit it as a CVE to be vetted by Mitire.” regarding this on January 28th
KnowBe4 invited me to their bounty program on Feb 27 after reaching out to them about a post I was making on LinkedIn.
That post can be seen here, which is one of the original posts Exegy wanted taken down in the proposal Robert “Bobby” Earles sent me.
I found it so interesting that Exegy never once sent me an email or anything to not communicate with any of their employees, but they like to tell their employees they can not communicate with a friend by any means.
Important Updates
● Added Kent Reponse about KnowBe4 and being vetted by KnowBe4 (11/20 2:54PM)
● Corrected things in KnowBe4, added more links and items to it (11/20 3:09PM)
● Added never received any kind of email to stop communicating (11/20 3:26PM)
