Beware of Security by Press Release
Summary: DirectDefense, a Denver-based security firm, published a report claiming that Cb Response, a product sold by competitor Carbon Black, leaked customer data by submitting suspicious files to the cloud-based multiscanner VirusTotal, which allows paying customers to download files submitted by others. Carbon Black responded that the feature was not enabled by default and that customers are informed of the privacy risks, while security expert Adrian Sanabria noted that dozens of other vendors submit binaries to VirusTotal and that DirectDefense singled out a competitor without alerting Carbon Black before going public.
Key Takeaway: VirusTotal holds one of the largest repositories of files in the world, and Lesley Carhart noted that an actor who could identify files uploaded from a target organization, even as hashes, could learn what software, operating systems, and document types it uses.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026