It was actually well-intentioned - an embedded web server on an IKEA DIRIGERA smart hub was supposed to display license information, but it ended up unnecessarily increasing the attack surface and leaking data. The root cause was a missing config setting for the web server's document root, so basically the entire file system was exposed. It could have been worse, but rights management and hardening prevented a few subsequent problems. Nevertheless, minimizing the attack surface and conducting penetration testing might have prevented the problem. Full advisory linked in the comment. #itsecurity #infosec #ikea #owasp #pentesting
Pentagrid
Computer and Network Security
Buchs, St Gallen 518 followers
We hack things. Pentagrid performs technically solid security assessments of IT systems using qualified analysts.
About us
We hack things - IT security testing Pentagrid is specialised in the manual and semi-automated IT security analysis of IT systems. Due to more than a decade of experience in the software, infrastructure, and hardware security analysis field, our team is able to support our customers in a variety of information security related topics. As information security is a field that requires knowledge from abstract concepts to deep technical processes, we believe that perpetual learning is a key element of our mission. With the help of our analysts, our customers are able to identify risks and subsequently address the underlying technical issues. Imprint and privacy statement: https://www.pentagrid.ch/en/pages/imprint-and-contact/
- Website
-
https://www.pentagrid.ch
External link for Pentagrid
- Industry
- Computer and Network Security
- Company size
- 2-10 employees
- Headquarters
- Buchs, St Gallen
- Type
- Privately Held
- Founded
- 2019
- Specialties
- IT Security Consulting, Penetration Testing, Security Assessments, and Source Code Reviews
Employees at Pentagrid
View 3 employees at Pentagrid
or
Locations
-
Primary
Get directions
Bahnhofstrasse 7
Buchs, St Gallen 9470, CH
-
Get directions
Am Treptower Park 75
Berlin, BE 12435, DE
Updates
-
Pentagrid reposted this
Parsing modern ASP.NET Core Identity password hashes for password cracking with hashcat. https://lnkd.in/dCygmCKX #itsecurity #infosec #hashcat #asp #dotnet
-
Parsing modern ASP.NET Core Identity password hashes for password cracking with hashcat. https://lnkd.in/dCygmCKX #itsecurity #infosec #hashcat #asp #dotnet
-
At Pentagrid, we occasionally review our clients' internal processes to identify IT security risks. When we discovered that large sums of money are transferred with just a few clicks and no transaction verification, we helped securing the process. At the same time, we developed a tool to support this improvement. #itsecurity #infosec #iso200222 #pain001 Link in the comments