Tobacco company got smoked by leaving secret recipes on a file share

In a surprising turn of events, a tobacco company found itself at the receiving end of a security breach after its confidential recipe files were left exposed on a shared network drive. Professional pen tester Dahvid Schloss, tasked with uncovering vulnerabilities, stumbled upon the unprotected file shares while probing the company's network.

Using tools such as Metasploit and Nmap, Schloss discovered an open share with no access restrictions, revealing sensitive records and, most tellingly, a folder named "confidential" containing files with information about the manufacturing process of various tobacco products. One such file was marked as "Confidential" but instructed against sharing.

Despite Schloss's efforts to demonstrate the severity of the situation by downloading the file, his manager advised against retaining a copy due to its sensitive nature. After reporting his findings to the company, Schloss was shocked to learn that the recipe files were not authentic and that the security team vehemently denied their existence. The company reportedly deleted the files, leaving Schloss without concrete evidence of the breach.