↓Skip to main content

External Attack Surface

Tilting at Wind Farm Portals - a Modern Day Quixotic Challenge

8 August 2023·1046 words·5 mins

by: Lari Huttunen

A story of a lone vulnerability researcher's quest to get each publicly exposed Nordex wind farm management portal out of the Internet. — A story of a lone vulnerability researcher’s quest to get each publicly exposed Nordex wind farm management portal out of the Internet.

Woocommerce with Wordpress - a Woe in its Own Right

11 July 2023·2026 words·10 mins

by: Lari Huttunen

Navigating the Challenges of WooCommerce: Unveiling the intricacies of this widely-used ecommerce platform. Understand the complexities involved in building and managing online stores effectively.

Case VMware: Why Tracking Your External Attack Surface is Critical?

9 May 2023·1223 words·6 mins

by: Lari Huttunen

To exemplify why defense in depth is essential, we examine a batch of VMware vulnerabilities exploited by ransomware operators.

3 Ransomware Precursors Laid Bare in a Cyber Truth or Dare

14 February 2023·1651 words·8 mins

by: Lari Huttunen

How to prevent a ransomware attack from bringing down your business often boils down to not exposing actively exploited vulnerabilities to the Internet.

How to Identify Attack Surface that Must be Addressed

8 November 2022·2300 words·11 mins

by: Juhani Eronen

How can you identify threats to network security through attack surface assessments and prioritise the findings to fix the discovered issues.

WordPress Version? Make Sure You're Running the Latest Supported

11 October 2022·1631 words·8 mins

by: Lari Huttunen

Running an unsupported version of WordPress will expose you to unnecessary risk of getting hacked which is possible, if not easy to avoid.

Software Dependency Failures: jQuery, a Canary in the Coal Mine

13 September 2022·1491 words·7 mins

by: Lari Huttunen

How a vulnerability in a popular javascript library can act as an indicator of poor information security practices for an entire host or a service.

Further Examination into External Attack Surface

28 June 2022·2865 words·14 mins

by: Juhani Eronen

Getting from assets to exposure, or why identifying critical attack surface exposed by your assets might not be that straightforward after all.

Management Interfaces - Attack Surface Hidden in Plain Sight

14 June 2022·2069 words·10 mins

by: Lari Huttunen

Management interfaces increase your external attack surface and their vulnerabilities represent practical attack vectors into your organization.

Practical Methods for Assessing Your External Attack Surface

22 March 2022·2271 words·11 mins

by: Juhani Eronen

The siege of Château Gaillard between September 1203 and March 1204 is a good example of determined attackers exploiting a weakness in the defenders' threat model. As the story has it, a French soldier clambered up the latrine chute and let in his compatriots to take over the castle. Photo (c) Lari Huttunen. — The siege of Château Gaillard between September 1203 and March 1204 is a good example of determined attackers exploiting a weakness in the defenders’ threat model. As the story has it, a French soldier clambered up the latrine chute and let in his compatriots to take over the castle.