{"id":5123,"date":"2023-11-08T17:18:46","date_gmt":"2023-11-08T21:18:46","guid":{"rendered":"https:\/\/solutionsreview.com\/security-information-event-management\/?p=5123"},"modified":"2023-11-08T17:19:22","modified_gmt":"2023-11-08T21:19:22","slug":"microsoft-data-leaks-and-the-importance-of-open-source-intelligence","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/security-information-event-management\/microsoft-data-leaks-and-the-importance-of-open-source-intelligence\/","title":{"rendered":"Microsoft Data Leaks and the Importance of Open-Source Intelligence"},"content":{"rendered":"

\"Open-Source<\/p>\n

Solutions Review\u2019s\u00a0Contributed Content Series<\/u><\/a>\u00a0is a collection of contributed articles written by thought leaders in enterprise software categories.\u00a0Vaidotas \u0160edys of Oxylabs<\/a> walks us through open-source intelligence: the essentials, monitoring threats from the dark web, and supplementing cybersecurity.<\/strong><\/em><\/p>\n

Interconnected digital technology advances at a rapid pace, and so do the tactics and strategies employed by malicious individuals, criminal groups, and even nation-states. The World Economic Forum predicts global cyber-crime will reach $10.5 trillion by 2025, forcing businesses and governments to look for next-generation solutions against emerging digital threats.<\/p>\n

Unfortunately, deliberate criminal activity is only part of the challenge in this data-driven era. Costly leaks of sensitive data might happen due to simple human errors\u2014 in September, Microsoft\u2019s data was leaked two times, not only disclosing the company\u2019s plans for the next-gen Xbox but also exposing private employee data. As we already know, at least one of these events happened due to an accidentally misconfigured URL link.<\/p>\n

Raising public awareness, educating employees, and implementing standard security measures (such as data encryption, multi-factor authentication, or routing traffic through VPNs) are good recommendations for increased organizational security. However, they are hardly enough today if one does not employ open-source intelligence.<\/p>\n
Widget not in any sidebars
\n

Microsoft Data Leaks and the Importance of Open-Source Intelligence<\/strong><\/h2>\n
\n

What is Open-Source Intelligence?<\/strong><\/h3>\n

Open-source intelligence, or OSINT, defines the efforts of collecting, analyzing, and utilizing information from publicly available web sources, including forums, libraries, open databases, and even the dark web. Though OSINT can be used to gather commercially important business information and perform market analysis, at Oxylabs, we usually use it in the context of cyber threat intelligence.<\/p>\n

Cybersecurity companies that employ open-source intelligence crawl through thousands of sites, forum messages, and dark web marketplaces, looking for stolen personal credentials and other confidential information, such as source code or trade secrets. Monitoring these sources also helps identify insecure databases and domain squatting.<\/p>\n

It might sound counterintuitive, but organizations often do not suspect that some of their sensitive data is lurking somewhere in the open cyberspace. As such, OSINT helps organizations find both unintentional data leaks and criminal data breaches. It can also aid in identifying insecure devices and outdated applications.<\/p>\n

The breakthrough that OSINT brings to the cybersecurity landscape mostly comes from the fact it uses publicly available information, releasing cybersecurity organizations of a legally troubling necessity to scour through classified or restricted sources looking for criminal evidence. Moreover, modern data scraping solutions, combined with artificial intelligence (AI) and machine learning (ML), allow them to pull and analyze raw cyber intelligence in real time.<\/p>\n

OSINT \u201cStarter\u201d Pack<\/h3>\n

To gather cyber threat intelligence, cybersecurity providers must scan thousands of URLs looking for specific client data\u2014 it can be corporate email addresses or phone numbers, company names, employee information, and technical details, such as access tokens or IP addresses. The company can be instantly alerted whenever compromised data becomes available in the public domain or the dark web.<\/p>\n

It is important to note that companies might monitor not only data directly related to their business and employees but also their client data, alerting them in case their passwords or other sensitive information has been breached.<\/p>\n

The biggest challenges here are those of scale and anti-scraping measures. First of all, the global \u201csurface\u201d web hosts about 6 billion websites, which is only the tip of the iceberg. The deep web, which isn\u2019t indexed by search engines, is estimated to be 400 to 550 times as large. Scraping at such a scale requires powerful automation and ML-driven solutions to structure otherwise a massive mess of unstructured data that comes in various formats and languages.<\/p>\n

Furthermore, threat actors today are technically advanced professionals, employing anti-bot measures that can include anything from honey-pots serving erroneous data to IP blocking that compromises real-time data flow. It means that cybersecurity companies have to employ resilient proxy networks together with adaptive scraping solutions to circumvent the blocks. With this in mind, it is well worth leaving OSINT efforts for cybersecurity professionals, especially if it involves monitoring the dark web.<\/p>\n

Diving into the Dark<\/strong><\/h3>\n

The dark web is a part of the deep web that is inaccessible to ordinary browsers and hidden by multiple proxy layers. Although there are legitimate actors that use this part of the internet, e.g., investigative journalists, law enforcement actors, and intelligence agencies, the dark web is mostly employed by criminals. This is where stolen private data, intellectual property, confidential information, drugs, and illegal weapons are sold.<\/p>\n

As in the case of the surface web, dark web monitoring is performed with the help of custom crawlers and scraper bots. Surveilling the dark web is a valuable source of information about fresh data breaches and new cyber attack methods and vectors. It enables a faster incident response, closing the time gap between the data breach and the moment an organization becomes aware of it. For cybersecurity researchers, dark web monitoring also allows deep-diving into the newest cybercrime strategies.<\/p>\n

However, even if your organization suffered a breach, it is definitely not recommended to scour the dark web looking for that data yourself \u2014 firstly, the dark web is difficult to navigate without prior experience. Secondly, even if you\u2019re armed with proxy servers and VPNs, the risk of exposing your organization to malware and cyber attacks is still high. Therefore, it is always recommended to use \u201cburner computers\u201d for such tasks instead of devices connected to your corporate network.<\/p>\n

Final Recommendations<\/strong><\/h3>\n

Powered with modern scraping solutions and ML technology, open-source intelligence today allows cybersecurity companies to take a proactive approach to incident management and prevention. OSINT speeds up the detection of data leaks, cyberthreat hunt, and research on the newest criminal strategies.<\/p>\n

However, it is important to stress that, although becoming an imperative for cybersecurity, OSINT cannot and shouldn\u2019t replace standard security measures. Businesses should first of all ensure their sensitive data is actually safe. Removing unused access, updating passwords, using multi-factor authentication, working with reliable proxy and VPN providers, and periodically educating employees is the best way to make sure that your business data doesn\u2019t end up as a Black Friday deal on some dark web marketplace.<\/p>\n

The same applies to the recent hype around monitoring the dark web. Without denying the opportunities, the dark web surveillance opens up for professional cybersecurity researchers and threat hunters, for ordinary businesses out there, pulling valuable information from the surface web and integrating digital security best practices and standards into daily operations might be a more rewarding path to follow.<\/p>\n
Widget not in any sidebars
\n","protected":false},"excerpt":{"rendered":"

Solutions Review\u2019s\u00a0Contributed Content Series\u00a0is a collection of contributed articles written by thought leaders in enterprise software categories.\u00a0Vaidotas \u0160edys of Oxylabs walks us through open-source intelligence: the essentials, monitoring threats from the dark web, and supplementing cybersecurity. Interconnected digital technology advances at a rapid pace, and so do the tactics and strategies employed by malicious individuals, […]<\/p>\n","protected":false},"author":972,"featured_media":5124,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[551,1],"tags":[],"acf":[],"yoast_head":"\nMicrosoft Data Leaks and the Importance of Open-Source Intelligence<\/title>\n<meta name=\"description\" content=\"Vaidotas \u0160edys of Oxylabs walks us through open-source intelligence: the essentials, monitoring threats from the dark web, and supplementing cybersecurity.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/security-information-event-management\/microsoft-data-leaks-and-the-importance-of-open-source-intelligence\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Microsoft Data Leaks and the Importance of Open-Source Intelligence\" \/>\n<meta property=\"og:description\" content=\"Vaidotas \u0160edys of Oxylabs walks us through open-source intelligence: the essentials, monitoring threats from the dark web, and supplementing cybersecurity.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/microsoft-data-leaks-and-the-importance-of-open-source-intelligence\/\" \/>\n<meta property=\"og:site_name\" content=\"SIEM Tools & Security Event Management | Solutions Review\" \/>\n<meta property=\"article:published_time\" content=\"2023-11-08T21:18:46+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-11-08T21:19:22+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2023\/11\/microsoft-data.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"400\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Vaidotas \u0160edys\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Vaidotas \u0160edys\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/microsoft-data-leaks-and-the-importance-of-open-source-intelligence\/\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/microsoft-data-leaks-and-the-importance-of-open-source-intelligence\/\",\"name\":\"Microsoft Data Leaks and the Importance of Open-Source Intelligence\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/microsoft-data-leaks-and-the-importance-of-open-source-intelligence\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/microsoft-data-leaks-and-the-importance-of-open-source-intelligence\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2023\/11\/microsoft-data.jpg\",\"datePublished\":\"2023-11-08T21:18:46+00:00\",\"dateModified\":\"2023-11-08T21:19:22+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/06e303ccaabef5ead387c1213c943f77\"},\"description\":\"Vaidotas \u0160edys of Oxylabs walks us through open-source intelligence: the essentials, monitoring threats from the dark web, and supplementing cybersecurity.\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/microsoft-data-leaks-and-the-importance-of-open-source-intelligence\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/security-information-event-management\/microsoft-data-leaks-and-the-importance-of-open-source-intelligence\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/microsoft-data-leaks-and-the-importance-of-open-source-intelligence\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2023\/11\/microsoft-data.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2023\/11\/microsoft-data.jpg\",\"width\":800,\"height\":400,\"caption\":\"Open-Source Intelligence\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/microsoft-data-leaks-and-the-importance-of-open-source-intelligence\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Microsoft Data Leaks and the Importance of Open-Source Intelligence\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\",\"name\":\"SIEM Tools & Security Event Management | Solutions Review\",\"description\":\"Evaluating Enterprise SIEM Systems, Log Management Analytics & SOAR Platforms.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/06e303ccaabef5ead387c1213c943f77\",\"name\":\"Vaidotas \u0160edys\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/68fd22964a5c35984ad39f380b0f7fbd?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/68fd22964a5c35984ad39f380b0f7fbd?s=96&d=mm&r=g\",\"caption\":\"Vaidotas \u0160edys\"},\"description\":\"Vaidotas \u0160edys is the Head of the Risk Management department at Oxylabs. Having over ten years of experience in payment and digital risk management, Vaidotas has established himself as an influential force in the online web data-gathering industry. Before coming to Oxylabs, Vaidotas spent seven years at Western Union, working as a Risk Analyst and, later, leading Digital Risks and Digital Payments teams.\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/author\/sedys\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Microsoft Data Leaks and the Importance of Open-Source Intelligence","description":"Vaidotas \u0160edys of Oxylabs walks us through open-source intelligence: the essentials, monitoring threats from the dark web, and supplementing cybersecurity.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/security-information-event-management\/microsoft-data-leaks-and-the-importance-of-open-source-intelligence\/","og_locale":"en_US","og_type":"article","og_title":"Microsoft Data Leaks and the Importance of Open-Source Intelligence","og_description":"Vaidotas \u0160edys of Oxylabs walks us through open-source intelligence: the essentials, monitoring threats from the dark web, and supplementing cybersecurity.","og_url":"https:\/\/solutionsreview.com\/security-information-event-management\/microsoft-data-leaks-and-the-importance-of-open-source-intelligence\/","og_site_name":"SIEM Tools & Security Event Management | Solutions Review","article_published_time":"2023-11-08T21:18:46+00:00","article_modified_time":"2023-11-08T21:19:22+00:00","og_image":[{"url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2023\/11\/microsoft-data.jpg","width":800,"height":400,"type":"image\/jpeg"}],"author":"Vaidotas \u0160edys","twitter_misc":{"Written by":"Vaidotas \u0160edys","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/microsoft-data-leaks-and-the-importance-of-open-source-intelligence\/","url":"https:\/\/solutionsreview.com\/security-information-event-management\/microsoft-data-leaks-and-the-importance-of-open-source-intelligence\/","name":"Microsoft Data Leaks and the Importance of Open-Source Intelligence","isPartOf":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/microsoft-data-leaks-and-the-importance-of-open-source-intelligence\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/microsoft-data-leaks-and-the-importance-of-open-source-intelligence\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2023\/11\/microsoft-data.jpg","datePublished":"2023-11-08T21:18:46+00:00","dateModified":"2023-11-08T21:19:22+00:00","author":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/06e303ccaabef5ead387c1213c943f77"},"description":"Vaidotas \u0160edys of Oxylabs walks us through open-source intelligence: the essentials, monitoring threats from the dark web, and supplementing cybersecurity.","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/microsoft-data-leaks-and-the-importance-of-open-source-intelligence\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/security-information-event-management\/microsoft-data-leaks-and-the-importance-of-open-source-intelligence\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/microsoft-data-leaks-and-the-importance-of-open-source-intelligence\/#primaryimage","url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2023\/11\/microsoft-data.jpg","contentUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2023\/11\/microsoft-data.jpg","width":800,"height":400,"caption":"Open-Source Intelligence"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/microsoft-data-leaks-and-the-importance-of-open-source-intelligence\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/security-information-event-management\/"},{"@type":"ListItem","position":2,"name":"Microsoft Data Leaks and the Importance of Open-Source Intelligence"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website","url":"https:\/\/solutionsreview.com\/security-information-event-management\/","name":"SIEM Tools & Security Event Management | Solutions Review","description":"Evaluating Enterprise SIEM Systems, Log Management Analytics & SOAR Platforms.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/06e303ccaabef5ead387c1213c943f77","name":"Vaidotas \u0160edys","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/68fd22964a5c35984ad39f380b0f7fbd?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/68fd22964a5c35984ad39f380b0f7fbd?s=96&d=mm&r=g","caption":"Vaidotas \u0160edys"},"description":"Vaidotas \u0160edys is the Head of the Risk Management department at Oxylabs. Having over ten years of experience in payment and digital risk management, Vaidotas has established himself as an influential force in the online web data-gathering industry. Before coming to Oxylabs, Vaidotas spent seven years at Western Union, working as a Risk Analyst and, later, leading Digital Risks and Digital Payments teams.","url":"https:\/\/solutionsreview.com\/security-information-event-management\/author\/sedys\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/5123"}],"collection":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/users\/972"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/comments?post=5123"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/5123\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media\/5124"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media?parent=5123"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/categories?post=5123"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/tags?post=5123"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}