Key points
- The sample included websites from banks, retailers, universities, clinics, property developers, media organizations, and government services.
- The scanning tool now checks email configuration, compliance with Russian data-protection requirements, and security issues.
- The research underscores that exposed infrastructure and neglected configuration can be more significant than complex attacks.
Context
The project extends an earlier review of 50 websites and covers a broad cross-section of Russia's major online services. Its central lesson is relevant to technical decision-makers: protecting a system requires continuous checks of dependencies, DNS, mail, and other routine configuration details, not just defenses against advanced attacks.
What this means for you
Directly applicable
You can apply the same checks to your email, DNS, dependencies, and data-protection configuration to identify weaknesses before attackers exploit them.
Who benefits: Developers and technical decision-makers responsible for aging or externally connected systems benefit from a repeatable way to expose overlooked configuration risks.
Share article: