How We Audited a High-Traffic C Enterprise Stack on Google Cloud and Mitigated insecure memory deallocation leading to information disclosure
Initial Threat Landscape Assessment & Audit Scope Our engagement began with a critical enterprise C++ application stack hosted on Google Cloud Platform (GCP). The primary concern was a potential information disclosure vulnerability, suspected to stem from insecure memory management practices within the core C++ services. The stack comprised several microservices, a managed PostgreSQL database (Cloud […]