Get the latest market trends in your inbox

Stay on top of the latest market trends and economic insights with the Axios Markets newsletter. Sign up for free.

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Catch up on coronavirus stories and special reports, curated by Mike Allen everyday

Catch up on coronavirus stories and special reports, curated by Mike Allen everyday

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Denver news in your inbox

Catch up on the most important stories affecting your hometown with Axios Denver

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Des Moines news in your inbox

Catch up on the most important stories affecting your hometown with Axios Des Moines

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Minneapolis-St. Paul news in your inbox

Catch up on the most important stories affecting your hometown with Axios Minneapolis-St. Paul

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Tampa-St. Petersburg news in your inbox

Catch up on the most important stories affecting your hometown with Axios Tampa-St. Petersburg

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Illustration: Aïda Amer/Axios

The cybersecurity community is reckoning with influencer culture for the first time after several popular figures ran paid advertisements on their social media accounts.

The big picture: For years, the world of cybersecurity experts has operated more like a scientific community than a commercial one — and, until very recently, more like a counterculture than a service. The paid posts provided a glimpse of a corporate sponsor-driven future for security specialists surprised to find out that corporations knew who they were.

Driving the news: Several follower-rich cybersecurity Twitter accounts ran individualized promotions for Lenovo's secure line of products and security services, ThinkShield (all tagged "#ad #thinkshield"), sparking immediate pushback from the wider community.

  • The influencer marketer VizSense, not Lenovo, reached out to influencers. It's not clear how much Lenovo was aware of the plan.
  • The influencers who were contacted included a reporter, well-known researchers, a former intelligence operative, executives, a financial tech expert, an AI guru and others. All had more than 10,000 Twitter followers.
  • No one who ran the ads has confirmed being part of this campaign; however, several Twitter personalities posted using those hashtags.
  • VizSense, Lenovo and seven people who appear to have run Lenovo ads related to this campaign — one of whom ran ads in multiple languages — did not respond for requests for comment.

The campaign prompted immediate criticism online, with several security luminaries seeking out and posting screenshots of paid posts.

Between the lines: On Instagram, YouTube and other platforms, influencers with large followers routinely take cash to promote products, often in the fashion industry or entertainment. But this appears to be the first time personality-driven advertisements have been used in cybersecurity.

Several of the influencers who turned down the ads told Codebook that companies could use established, less-controversial methods if they wanted researchers to help increase awareness of security products and initiatives.

  • Researchers are often paid to conduct third-party evaluations of products. They can be brought in to assist in relevant research projects or speak at branded events and webcasts on research topics.
  • "There's nothing wrong with compensated reviews," said Chris Wysopal, co-founder and CTO of Veracode, who noted that VizSense couched an offer to him in terms of paid evaluations of Lenovo wares. "But it didn't look like the tweets people put out were reviews."
  • Wysopal and Jake Williams of Rendition Infosec, who both declined VizSense's offer, noted that they were asked to review Lenovo's ThinkShield based on an information sheet, not a product. Neither felt like they could have evaluated a full product in the time frame VizSense offered.

Zack Whittaker, the security editor for TechCrunch, told Codebook that VizSense approached him over LinkedIn — implying they were at least somewhat aware of his role as a journalist.

  • "It's particularly unethical for a company to actively approach journalists, of all people — ergo, to ask them to violate their ethics — to promote something in exchange for payment," he said, via electronic message.

The irony, said Wysopal, is that the backlash might obscure real progress Lenovo has made since the Superfish incident.

  • "There's a lot of good to ThinkShield, according to what they sent me," he said, pointing to supply chain protections that could fight future Superfish-style problems. "They didn't need to go with this approach."

Go deeper

Bipartisan group of senators unveil $908 billion COVID stimulus proposal

Sens. Joe Manchin (D-W.Va.) and Susan Collins (R-Maine) in the Capitol in 2018. Photo: Tom Williams/CQ Roll Call

A bipartisan group of senators on Tuesday proposed a $908 billion coronavirus stimulus package, in one of the few concrete steps toward COVID relief made by Congress in several months.

Why it matters: Recent data shows that the economic recovery is floundering as coronavirus cases surge and hospitals threaten to be overwhelmed heading into what is likely to be a grim winter.

Inside Patch's new local newsletter platform

Illustration: Annelise Capossela/Axios

Patch, the hyperlocal (and profitable) local digital news company, has built a new software platform called "Patch Labs" that lets local news reporters publish their own newsletters and websites, sources tell Axios.

Why it matters: It follows a growing trend of journalists going solo via newsletters at the national level.

Scoop: Politico stars plot new Playbook

Anna Palmer and Jake Sherman. Photo: Alex Wong/Getty Images

Three of Politico’s biggest reporting stars plan to launch a competitor to the company’s Politico Playbook franchise, sources tell me. 

Why it matters:  Jake Sherman, Anna Palmer and John Bresnahan will launch a daily newsletter in 2021 as a stand-alone company, the sources say. In effect, they will be competing against the Playbook franchise they helped create and grow.