Pen tester finds tobacco firm's product recipes on an open file share, then the company denies they existed
RESEARCHMetasploitredteam/daily · 1 source
- Severity
- Medium
- Sources
- 1
What happened
A penetration tester working for a tobacco company found an unauthenticated SMB file share holding IT and HR records and a 'confidential' folder with product recipe files, accessible to every employee. The company's Trend Micro antivirus raised no alert during his scanning, and the client later denied the files were real, a dispute that continued for about a year. The files had been deleted or moved by the end of the engagement.
For IT people · Written by AI from 1 source · Wrong?
What to do
- Review network file shares and remove anonymous or unauthenticated access.
- Restrict access to sensitive folders such as confidential, HR and IT records to authorised users only.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
The Register (Security)
Who and what is in it
Products