[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fuIfQcMY8V0fELIP3X57l2KmfHTchIkzDE_r0MZ32waM":3},{"article":4,"iocs":49,"watch_terms":50,"solutions":51,"lesson":140},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":26,"category":27,"article_tags":31},"0678e5f7-7fb1-4528-8a6b-a98519de9be0","Tobacco company got smoked by leaving secret recipes on a file share","tobacco-company-got-smoked-by-leaving-secret-recipes-on-a-file-share-fce20f","They denied the data was real...then removed it","During a penetration test, a security researcher discovered a tobacco company's secret product recipes stored on an unsecured internal file share. The files, marked 'Confidential' and 'Do not share,' contained detailed manufacturing information. The company initially denied the data was real, but later removed it, suggesting the exposure was indeed genuine.","Tobacco company's secret recipes exposed on an unsecured file share during a penetration test.","https:\u002F\u002Fwww.theregister.com\u002Fsecurity\u002F2026\u002F11\u002F05\u002Ftobacco-company-got-smoked-by-leaving-secret-recipes-on-a-file-share\u002F5307704","https:\u002F\u002Fimage.theregister.com\u002F?imageId=5307708&width=800","2026-11-05T16:02:00+00:00","2026-11-05T17:00:22.780255+00:00",7,[17,20,23],{"name":18,"type":19},"Metasploit","product",{"name":21,"type":22},"Trend Micro","vendor",{"name":24,"type":25},"SMB","technology","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":26,"icon":28,"name":29,"slug":30},null,"Breaches","breaches",[32,37,39,44],{"category":33},{"id":34,"icon":28,"name":35,"slug":36},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":38},{"id":26,"icon":28,"name":29,"slug":30},{"category":40},{"id":41,"icon":28,"name":42,"slug":43},"80544778-fabb-4dcd-aa35-17492e5dcf4f","Vulnerabilities","vulnerabilities",{"category":45},{"id":46,"icon":28,"name":47,"slug":48},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[21,18],{"controls":52,"vendors":139},[53,82,110],{"slug":54,"name":55,"problem":56,"products":57},"penetration-testing","Penetration testing and bug bounty","Someone friendly finds the holes before someone hostile does.",[58,66,74],{"vendor_slug":59,"vendor_name":60,"vendor_logo":61,"product_slug":62,"product_name":63,"url":64,"description":65},"hackerone","HackerOne","\u002Fvendor-logos\u002Fhackerone.png","bug-bounty","HackerOne Bug Bounty","https:\u002F\u002Fwww.hackerone.com\u002Fproduct\u002Fbug-bounty-platform","Managed bug bounty and vulnerability disclosure programmes.",{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":70,"product_name":71,"url":72,"description":73},"safebreach","SafeBreach","\u002Fvendor-logos\u002Fsafebreach.png","safebreach-propagate","SafeBreach Propagate","https:\u002F\u002Fwww.safebreach.com\u002Fpropagate-attack-path-validation\u002F","Automated penetration testing that emulates lateral movement, privilege escalation and credential harvesting to show how far a breach could spread.",{"vendor_slug":75,"vendor_name":76,"vendor_logo":77,"product_slug":78,"product_name":79,"url":80,"description":81},"pentera","Pentera","\u002Fvendor-logos\u002Fpentera.png","pentera-platform","Pentera Platform","https:\u002F\u002Fpentera.io\u002Fpentera-platform\u002F","Runs automated, safe attacks in production to validate exploitable attack paths, prioritise proven risk and confirm fixes. Modules cover internal networks, the external attack surface and cloud.",{"slug":83,"name":84,"problem":85,"products":86},"asset-inventory","Cyber asset inventory","You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.",[87,95,102],{"vendor_slug":88,"vendor_name":89,"vendor_logo":90,"product_slug":91,"product_name":92,"url":93,"description":94},"runzero","runZero","\u002Fvendor-logos\u002Frunzero.png","runzero-platform","runZero Platform","https:\u002F\u002Fwww.runzero.com\u002Fplatform\u002F","Finds and fingerprints everything on the network and in the cloud, including IoT and OT devices, without agents or credentials, and flags exposures.",{"vendor_slug":96,"vendor_name":97,"vendor_logo":98,"product_slug":99,"product_name":97,"url":100,"description":101},"lansweeper","Lansweeper","\u002Fvendor-logos\u002Flansweeper.png","lansweeper-asset-inventory","https:\u002F\u002Fwww.lansweeper.com\u002Fproduct\u002Fasset-inventory\u002F","Discovery with and without agents that keeps one central, always-updated inventory of devices, software and their details.",{"vendor_slug":103,"vendor_name":104,"vendor_logo":105,"product_slug":106,"product_name":107,"url":108,"description":109},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-cyber-assets","Axonius Cyber Assets","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fcyber-assets","A continuously reconciled view of every asset, who owns it, which security controls cover it and where it drifts from policy.",{"slug":111,"name":112,"problem":113,"products":114},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",[115,123,131],{"vendor_slug":116,"vendor_name":117,"vendor_logo":118,"product_slug":119,"product_name":120,"url":121,"description":122},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","zero-trust-endpoint-firewall","Zero Trust Endpoint Firewall","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fzero-trust-endpoint-firewall","Centrally managed host firewall with device-level and dynamic access rules, to limit which machines can talk to each other.",{"vendor_slug":124,"vendor_name":125,"vendor_logo":126,"product_slug":127,"product_name":128,"url":129,"description":130},"akamai","Akamai","\u002Fvendor-logos\u002Fakamai.png","guardicore-segmentation","Akamai Guardicore Segmentation","https:\u002F\u002Fwww.akamai.com\u002Fproducts\u002Fakamai-guardicore-segmentation","Software-based microsegmentation with traffic visibility.",{"vendor_slug":132,"vendor_name":133,"vendor_logo":134,"product_slug":135,"product_name":136,"url":137,"description":138},"illumio","Illumio","\u002Fvendor-logos\u002Fillumio.png","illumio-segmentation","Illumio Segmentation","https:\u002F\u002Fwww.illumio.com\u002Fillumio-segmentation","Maps traffic between workloads and enforces segmentation across data centre, cloud and endpoints.",[],{"slug":141,"title":142,"body":143,"framework_refs":144,"framework_notes":152},"secret-recipes-exposed-on-unsecured-internal-file-share","Secret Recipes Exposed on Unsecured Internal File Share","A tobacco company's most sensitive intellectual property — detailed product recipes marked 'Confidential' and 'Do not share' — was left openly accessible on an internal file share with no meaningful access restrictions. This is a classic case of labelling data correctly but failing to enforce the controls that the labels imply, rendering the classification effort meaningless. The exposure was only discovered during a third-party penetration test, meaning it could have been silently exploited by an insider or attacker for an unknown period beforehand. The company's initial denial of the breach further highlights a weak incident-response posture and poor asset awareness. Sensitive intellectual property exposed in this way can cause irreversible competitive, legal, and reputational damage.",[145,146,147,148,149,150,151],"CIS Control 3: Data Protection","NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control","NIST SP 800-53 SI-2: Flaw Remediation","ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities","GDPR Article 32","CIS Control 17: Incident Response Management","NIS2 Article 21(2)(b)",{"GDPR Article 32":153,"NIS2 Article 21(2)(b)":154,"CIS Control 3: Data Protection":155,"NIST SP 800-53 SI-2: Flaw Remediation":156,"CIS Control 17: Incident Response Management":157,"ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities":158,"NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control":159},"Article 32 mandates appropriate technical measures to ensure data security; leaving confidential business data (which may include employee or supplier information) on an open share fails this obligation and could trigger regulatory scrutiny.","NIS2 requires entities to implement policies on access control and asset management; the absence of enforced access restrictions on a share containing critical intellectual property is a direct gap against this requirement.","This control requires organisations to inventory, classify, and apply protective controls to sensitive data — directly addressing the failure to restrict access to files already labelled Confidential.","While not a software flaw, SI-2's broader principle of identifying and correcting security weaknesses applies — a routine internal scan or review should have surfaced this misconfigured share before a penetration tester did.","The company's initial denial and slow removal of the data indicate an immature incident-response process; a defined IR plan would have enabled faster verification, containment, and transparent communication.","ISO 27001 requires organisations to proactively identify and remediate technical weaknesses; treating overly permissive file-share permissions as a vulnerability requiring remediation would have closed this exposure.","The framework requires that access to assets is limited to authorised users and processes; enforcing least-privilege on the file share would have prevented broad internal access to the secret recipes."]