Hacked in Plain Sight: Is Your Brand at Risk?

Hacked in Plain Sight: How Vulnerable is Your Online Brand?

By: Ganesan D 26 Jun 2025 Category: Cyber Threats

With the increasing adoption of cloud services, many cloud storage configurations could accidentally or intentionally be set to public, revealing internal confidential information. Worldwide, more than 11.6 billion files from organizations are publicly available.

We have seen public files containing personal data of employees, their passwords, and even maps of facilities containing locations of critical business assets such as Operational Technology (OT) and server rooms. These files can be found with a method called Google dorking. Even if a file doesn’t contain any sensitive information, its metadata could reveal the name of the person who edited it and their location.

In addition, the job ads you post online may reveal the technology you use – useful information for adversaries to tailor their exploit.

Also, your promotional photos or videos online showing offices or factories could show vulnerable information such as OT, software, or your facility’s physical security measures.

Social Media

A very valuable social media platform for adversaries is LinkedIn, as employees use it to share their job positions and experiences. Such information can reveal organizational structures, personal information to be used for phishing, and technologies used within the organization as described in the work experience section of employee profiles.

Leaked/Stolen Information

Third-party platforms used by your employees or your organization may have already experienced a data breach involving user credentials. When sites like haveibeenpwnd.com obtain these leaked credentials, adversaries can check your employee’s email address to see if their password has been compromised. If the password is similar to the password they use within your organization, adversaries can gain an initial foothold.

Other unusual sources are 'pastebin' sites, which host plain text that users have pasted to share large texts. Such sites may also contain breached data such as credentials and other sensitive information obtained by adversaries.

Finally, credentials from breaches, unknown vulnerabilities, and exploits for software you use could also be sold on the dark web.

Network and Subdomain Search Engines

Furthermore, sites like shodan.io and censys.com index IP addresses of devices such as routers, webcams, servers, and even OT systems connected to the open internet and scan for software versions on their open ports. This information can be exploited to gain initial access.

Another way to find hidden networked resources is via domain name enumeration. Your organization most likely owns a domain name and has probably created many forgotten subdomains such as 'blog.yourdomain.com'. Systems hosting these subdomains could have vulnerabilities that can be leveraged by adversaries to move laterally or escalate to higher domains.

Recommendations

In order to minimize the impact of adversaries exploiting information or system vulnerabilities found with OSINT, we recommend to:

Ensure you have clear internal policies on what information can be publicly shared and include it in regular training.
Make sure that anything that is publicly accessible is free of sensitive or critical information, including metadata. Use Data Loss Prevention (DLP) policies or a CMS that strips sensitive data before publishing.
Use services such as Red Team exercises, Cyber Due Diligence, and Internet Footprint Analysis from third parties such as our Cyber Defense Services.
Ensure that robust Cyber Threat Intelligence (CTI) and organization-specific processes and solutions are in place to receive early notifications about possible exposure of sensitive information and attacks against the organization.

Conclusion

In short, adversaries can discover a great portion of your attack surface by combining a wide variety of OSINT sources. Determining what sensitive information is accessible and how to contain it, creating security policies, implementing data classification, DLP, CTI, and other safeguards are daunting tasks. If your organization does not have the in-house expertise or capacity to adequately address these critical measures, feel free to catch us for a coffee at our office in UAE or just reach out via the contact buttons on the right.

Latest Blog Posts

How CNN Models Detect Image-Based Malware and Cyber Threats Using Deep Learning

By: Cyber Security Team 12 May 2026 Category: AI Cyber Security

Discover how convolutional neural networks (CNN) and deep learning detect image-based malware and hidden cyber threats. Learn how AI software development companies use machine learning, computer vision, and tools like Teachable Machine by Google for advanced cybersecurity threat detection and real-time security analytics.

NLP vs Traditional Security Analytics: What Works Better for Cyber Threat Detection?

By: Cyber Security Team 11 May 2026 Category: Cyber Security Analytics

Explore how Natural Language Processing (NLP), machine learning in cybersecurity, and traditional security analytics compare in modern threat detection. Learn which approach improves cyber attack detection, log analysis, network security monitoring, and AI-powered cybersecurity protection for businesses.

Deep Learning Algorithms for Detecting Zero-Day Cyber Attacks

By: Ganesan D 09 May 2026 Category: Cyber Security

Discover how deep learning algorithms, convolutional neural networks, and natural language processing NLP improve zero-day cyber attack detection, network security, real-time threat analysis, and advanced cybersecurity protection.