Pen tester finds tobacco firm's product recipes on an open file share, then the company denies they existed
RESEARCHMetasploitredteam/daily · 1 source
- Severity
- Medium
- Sources
- 1
What happened
A security tester hired to check a tobacco company's network found confidential product recipes sitting in a folder that every employee could open. When he reported it, the company insisted the files were not real, and the files later disappeared. The story shows how poor access controls can expose valuable secrets.
Like I’m new · Written by AI from 1 source · Wrong?
What to do
- Review network file shares and remove anonymous or unauthenticated access.
- Restrict access to sensitive folders such as confidential, HR and IT records to authorised users only.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
The Register (Security)
Who and what is in it
Products