It's absolutely insane and terrifying that you can never get into contact with anyone at a company in an emergency.

This pretty big company has 99% chance of being compromised, and their data is just sitting out there, but nobody at this company responds. Engineers, security staff, CTO... zero response.

They even have a security.txt (as in it doesn't 404), but it's empty.

This is why companies get ransomed. Because if they don't see it, it isn't real.

@cyberlyra, the number of dumb, crazy things on the internet is absolutely mind-blowing. old, antiquated protocols; protocols that are supposed to be multicast-only but are routed over unicast; databases with terabytes of data exposed without authentication. I've seen a situation where hundreds of water treatment plants were just sitting out there, active drone data, GPS data, telecom call detail records, serial ports to major ISPs that log you right into routers, botnets that propagate through Jenkins servers.

If you name something that shouldn't be on the internet, I've probably seen it on the internet.

Over the weekend, one of my systems tagged an open directory as russian (language), and I went and looked and saw a very interesting telegram bot: