How We Audited a High-Traffic C Enterprise Stack on DigitalOcean and Mitigated insecure memory deallocation leading to information disclosure
Initial Assessment and Threat Landscape Our engagement began with a high-level architectural review of a critical enterprise application stack hosted on DigitalOcean. The primary concern was a recent uptick in suspicious network activity and anecdotal reports of intermittent data leakage, which pointed towards a potential security vulnerability. The stack comprised a PHP-based web application, a […]