Inside the Black Hat USA NOC, we found cleartext Splunk and BigFix traffic, leaky apps, and an exposed MCP server with read and write access.
After ten Black Hat NOCs, see what network traffic reveals: cleartext passwords, a leaked API key, and infected devices nobody noticed.
The antidote to security erosion is monitoring your traffic. I’ve learned you have to "peep those packets" to catch the leaks and make response a...
Defending the SCinet network is critical work. See how we handled orders of magnitude more traffic using Corelight’s Open NDR Platform.
From plaintext chat leaks to unencrypted SIP and LLM jailbreaks, the Black Hat USA 2025 NOC saw it all.
Recapping findings from the Black Hat Asia 2025 NOC: location data, plain text logins, and self-hosted apps without TLS.
Working in the NOC at Black Hat Europe, we’re never quite sure what we’re going to see.
Learn how Corelight logs provide deep network visibility for incident response and threat hunting in the Black Hat NOC.
Our experience in the Black Hat NOC has made us into adherents for “Zero Trust…but verify.”