It was around 12:30 a.m. on Uncut ArchivesWednesday morning, and Justin Wynn and Gary Demercurio were in a bit of a tight spot. Specifically, the two were being arrested on the third floor of Iowa's Dallas County courthouse.
But Wynn and Demercurio weren't there to steal the only evidence linking them to some unnamed crime. Rather, reports the Des Moines Register, the two had been hired by the state court administration to attempt to obtain "unauthorized access" to court documents using "various means."
The two men work as physical penetration testers, or pentesters, for the cybersecurity company Coalfire and were simply doing their job. Unfortunately, that message somehow got lost in translation.
Specifically, the Registerreports that the state court administration now claims it "did not intend, or anticipate, those [security testing] efforts to include the forced entry into a building."
What is and is not off limits — something typically referred to as in or out of scope — during both digital and physical pentests is often a hot-button issue. That the scope of an engagement is often carefully negotiated ahead of time makes sense. After all, you wouldn't want the security company you hired to test your payroll system kidnapping your CEO and demanding he hand over the digital keys.
Coalfire's website includes a detailed penetration testing section, enumerating the various services offered by the company and detailing what a pentest entails.
"Throughout the engagement, we provide ongoing status reports, immediate identification of critical risks, and knowledge transfer to your technical team," reads the company's site. "At the end of the process, we ensure you have a complete understanding of the exploitable vulnerabilities in your environment and recommended remediation strategies."
Physical penetration is a common practice, and is not outside of the industry norm. One such pentester, who goes by Jek Hyde on Twitter, often details her various escapades online with the permission of the targeted client (her Twitter account is worth a follow).
All of this seemed to be lost on the local law enforcement, however. Both Wynn and Demercurio have been charged with possession of burglary tools and third-degree burglary. A $50,000 bond adds injury to the insult of being caught on the job.
But hey, at least the Dallas County courthouse now knows that its alarm system works.
Topics Cybersecurity
Why new James Webb Space Telescope pictures don't existAlibaba signs David Beckham as AliExpress global ambassador · TechNodeAmazon deals of the day: Google Pixel Fold, Blink Outdoor 4, Bose S1 Pro+, and Google Nest CamNIO expects sales to bounce back in Q2, gives update on third brand · TechNodeByteDance pours efforts into AI'Disaster': ExNamibia vs Scotland 2024 livestream: Watch T20 World Cup for freeThe intrepid James Webb Space Telescope reaches its distant outpost 1 million miles awayBest DoorDash deal: Get two $50 DoorDash gift cards for $79.99 at CostcoDouyin tightens rules for users involved in trending topics and viral content · TechNodeiOS 18 Mail app rumored to get 3 new features, including a 'Smart Replies' perkOnline retailer JD faces backlash from local book publishers amid lowHumane AI Pin charging case is a fire hazardChina’s Great Wall Motor to shut down European office as EV tariffs loom · TechNodeEngland vs. Iceland 2024 livestream: Watch live football for freeDidi posts 15% firstTesla looks to test FSD software in China with govt approval: report · TechNodeNew Zealand vs. Afghanistan 2024 livestream: Watch T20 World Cup for freeScotland vs. Finland 2024 livestream: Watch live football for freeBest KitchenAid deal: $30 off ice cream maker attachment Mick Jagger Forgot That He Wrote a Memoir Whitman’s Secret Novel Glenn O’Brien: The Art of Advertising NFT partygoers blame Bored Ape Yacht Club event for loss of vision For Patrick Modiano, the Past Is a Vexed Question Staff Picks: Anthony Heilbut, Caryl Churchill, Carl Phillips Samsung launches Galaxy S Pen Creator Edition in the U.S. Elon Musk buys Twitter: What we know about blue ticks, layoffs, content moderation and more Geronimo Takes Flight: A Beaver’s Adventure in the Sky Google Pixel Magic Editor won't let you edit IDs, faces, other photos On Translating Amparo Dávila’s “Moses and Gaspar” Nintendo is making a 'Legend of Zelda' live This wellness marketplace lets you shop by mood Man eats 40 chickens in 40 consecutive days, goes viral Food sounds on TikTok like crunching and chewing make me anxious Was Jane Austen Poisoned? Let’s Just Pretend… Readability vs. Difficulty (That Classic Debate) Three Essays Celebrating Paula Fox (1923–2017) The Try Guys survived a PR crisis. Here's how they did it. Say What You Will About Orwell, the Guy Could Smell
1.6956s , 8202.6328125 kb
Copyright © 2025 Powered by 【Uncut Archives】,Pursuit Information Network