Iris Plaza: establish the scope of a cloud incident
An estimate of stored data does not settle a breach’s impact. Iris Plaza shows why customer groups, fields and services need separate evidence before containment and restart decisions.
Blog
Практические руководства по пентесту, исследованию уязвимостей и инструментам безопасности на базе ИИ.
Статьи публикуются на английском и португальском языках.
Исследования
135 публикаций
Barracuda: verify administrative access and patch evidence
Barracuda remediation needs evidence tied to each product and its administration interface. Identify what to record without reproducing the exploit chain.
SonicWall: verify SAML and MFA after the SSLVPN fix
MFA policy needs to follow the authentication paths the firewall actually offers. CVE-2026-19868 calls for checking configuration, firmware and access decisions together.
OpenSSH on Alpine: verify accounts and the daemon after patching
Using SSH keys also requires checking which authentication paths the server accepts. SSHole calls for connecting accounts, effective configuration, the installed package and the running daemon.
Amadeus: defining access to booking data
The Amadeus notices describe customers and bookings with different scopes. For businesses, the response needs to connect the data involved, who could query it and the evidence of containment.
Industrial Node-RED: who can deploy flows and expose routes?
Deploying a flow can change how an industrial integration behaves. Verify deployment authority and the protection of the routes that flow makes available.
BTCPay: the server changed. Who can still spend?
Replacing a machine calls for reviewing the authority attached to its wallet. Organize migration and integration acceptance before reopening the payment workflow.
Linux kernel fixes: approve the kernel that actually runs
Available updates and packages undergoing qualification require different decisions. Acceptance should identify the kernel loaded after each server’s maintenance.
False alerts: who can publish and restore a channel?
A message can arrive through the expected app and still require investigation. Review publishing permissions, alternative channels and criteria for restoring each function.