Corelight Bright Ideas Blog

Featured

Use our Zeek package to detect the affected eMudhra certificates, since devices that don’t automatically get updates remain vulnerable.

Inside the Black Hat USA NOC, we found cleartext Splunk and BigFix traffic, leaky apps, and an exposed MCP server with read and write access.

See how a Black Hat Asia 2026 threat hunt traced rare cleartext HTTP/2 traffic to exposed cookies after repeated QUIC and TLS failures.

At Black Hat Asia 2026, online games exposed cleartext inside TLS streams. See how Corelight uses network visibility to verify encryption.

See how a Black Hat music trivia game exposed unencrypted traffic, weak validation, and the value of network visibility.

Have questions?