OpenCode Console: proving provider API key revocation
Removing a credential from a tool and ending its validity at the issuer are different decisions. Structure replacement around accountable owners and evidence.
Blog
Praktyczne poradniki o pentestach, badaniu podatności i narzędziach bezpieczeństwa opartych na AI.
Artykuły są publikowane po angielsku i portugalsku.
Badania
124 wpisy
ConnectWise and Microsoft 365: response continues after disabling the app
Suspending an integration can contain new sign-ins and interrupt recovery at the same time. Response needs to examine remaining access and business continuity.
Data breach costs in 2026: beyond IBM's global average
A global average starts the discussion. A budget needs to show which services could stop, who works on the response and what supports each estimate.
IDScan: does your integration need to send the whole document?
Confirm which data supports the business decision and where images and extra fields are transmitted. A verification result and an identity copy serve different purposes.
Trezor and ShipMonk: deletion assurances need to cover the copies
The supplier confirmed deletion. Consider which evidence can establish its scope across operational systems, exports and recovery procedures.
VMware in the lab: did the update reach the workstation opening the VMs?
A test VM also depends on software installed on its workstation. Establish where remediation belongs and which evidence supports resuming the work.
Excel and freelancers: who approved what the spreadsheet asks to execute?
A professional conversation can deliver a file requesting actions beyond the task. The workflow needs to preserve that boundary without relying on the sender's assurances.
C-Track: does document confidentiality follow every access path?
A platform remaining available does not demonstrate that confidential files stayed protected. Verify where classification must be respected throughout the document workflow.
WhatsApp and Signal: who approved the computer receiving messages?
Encryption protects communication in transit, while the business must also decide which devices may join an account and verify when their access ends.