Threat spotlight

Business in the front, party in the back: backdoors in elastic servers expose private data

January 17, 2020 - It's all too easy to discover data leaks online, especially in cloud services. We take a look at misconfigurations in elastic servers that lead to exposed data on the Internet.

Researcher's corner

Hacking with AWS: incorporating leaky buckets into your OSINT workflow

September 13, 2019 - When penetration testing for an organization, what OSINT tactics can researchers employ? We discuss how hacking with AWS buckets can provide more recon data and uncover any leaks.

Researcher's corner

Caution: Misuse of security tools can turn against you

July 11, 2019 - If not implemented correctly, the very security tools we use to keep our information private may actually cause data leaks themselves. We outline a few cases and provide suggestions for researchers and security admins.

Threat analysis

Medical industry struggles with PACS data leaks

May 24, 2019 - PACS servers are often used to store and transmit patient data. But how is their security implemented? We take a look at case of how poor setup can easily lead to data leaks.

Malware | Threat analysis

Fileless malware: part deux

October 5, 2018 - In part two of this series on fileless malware, our malware analyst walks readers through two demonstrations of fileless malware attacks and shows the problems with detecting them using static signatures.