Brown and Ragan, who have been developing and publishing their "Search Diggity" tools for two years, say they have built the industry's largest database of search engine-exposed security vulnerabilities and threats, which is also being made available as a free tool for security professionals and researchers.
The new round of software tools can be used to identify security vulnerabilities and sensitive data not only on the enterprise's own systems, but also on associated networks and cloud services. One of the tools, called NotInMyBackYardDiggity, enables security professionals to search all sites that may contain information about their enterprises--including sites such as Twitter, Dropbox, PasteBin, and Google Docs.
Your networks may be under attack as you read this, but unless your security personnel are analyzing logs and leveraging common tools that are well known to your network operations teams, you may not find out until it is too late. In our What's Going On?: Monitor Networks To Thwart Intrusions report, we explain how your security and network teams can cooperate and use common tools to detect threats before your databases are compromised. (Free registration required.)