Iris Plaza: establish the scope of a cloud incident
An estimate of stored data does not settle a breach’s impact. Iris Plaza shows why customer groups, fields and services need separate evidence before containment and restart decisions.
Blog
Практичні посібники з пентесту, дослідження вразливостей та інструментів безпеки на основі ШІ.
Статті публікуються англійською та португальською мовами.
Статті
150 публікацій
Android: what proves the November security update?
A device can show November in fields that represent different fixes. Connect the security patch level, Google Play system update and build before closing maintenance.
Barracuda: verify administrative access and patch evidence
Barracuda remediation needs evidence tied to each product and its administration interface. Identify what to record without reproducing the exploit chain.
SonicWall: verify SAML and MFA after the SSLVPN fix
MFA policy needs to follow the authentication paths the firewall actually offers. CVE-2026-19868 calls for checking configuration, firmware and access decisions together.
OpenSSH on Alpine: verify accounts and the daemon after patching
Using SSH keys also requires checking which authentication paths the server accepts. SSHole calls for connecting accounts, effective configuration, the installed package and the running daemon.
Windows Paint: how to verify the Microsoft Store update
A workstation can be current in Windows Update and still have an older copy of Paint. CVE-2026-83844 provides a concrete way to test how your fleet verifies app fixes.
Amadeus: defining access to booking data
The Amadeus notices describe customers and bookings with different scopes. For businesses, the response needs to connect the data involved, who could query it and the evidence of containment.
Reducing SOC alerts while preserving coverage and evidence
A smaller queue can make investigations easier and can also hide relevant signals. Test alert grouping and suppression against expected cases, evidence and rollback criteria.
Industrial Node-RED: who can deploy flows and expose routes?
Deploying a flow can change how an industrial integration behaves. Verify deployment authority and the protection of the routes that flow makes available.