How We Audited a High-Traffic C++ Enterprise Stack on Linode and Mitigated insecure memory deallocation leading to information disclosure
Initial Triage: Identifying Anomalous Network Traffic Our engagement began with a critical alert from our SIEM regarding unusual outbound network connections originating from several high-traffic C++ microservices hosted on Linode. These services, responsible for processing sensitive user data, were exhibiting patterns inconsistent with their expected operational behavior. Specifically, we observed repeated, small-packet transmissions to an […]