CRA and the 24-hour deadline: does your team know when it starts?
A platform counter does not replace the event awareness record. Organize handoffs between security, product teams and representatives responsible for reporting.
Blog
Практичні посібники з пентесту, дослідження вразливостей та інструментів безпеки на основі ШІ.
Статті публікуються англійською та португальською мовами.
Дослідження
124 публікації
Advertising identifiers: what can your business control?
A privacy setting has a defined scope. Assess advertising identifiers and location collection without monitoring people’s movements.
Corporate investigations: who verifies the origin of delivered data?
A useful report also needs to explain how its information was obtained. The contracting company can examine that origin before accepting or distributing a deliverable.
Tesla Roadster takes flight: how it works and what remains unproven
The Roadster demonstration brought flying cars back into focus. Its announced trims, thrusters and restrictions deserve a closer reading.
SolarWinds ARM: who authorizes what the integration changes in the directory?
A tool reviewing permissions also uses permissions to operate. Check who may request changes and what authority the integration receives to perform them.
SparroWocky: which libraries is the approved application loading?
Recognizing a program does not establish the origin of everything it loads. Review needs to follow components, permissions and observed behavior.
PeopleSoft and WAFs: does the application receive a different request?
Blocking one visible address does not establish that every equivalent route is blocked. A review must connect the edge decision with the service receiving the request.
Defender is running: is its protection still receiving updates?
Service state alone does not establish whether protection remains current. Connect version, timing, distribution and the handling of update failures.
F5 APM and OAuth: who confirms authorization works after the fix?
A corrected appliance serves applications that depend on its decisions. Acceptance needs to check both permitted and denied authorization outcomes.