Blog
Research and writing from the team.
Vulnerability research, case studies and guides written by the LESIS team. Every post is published on blog.lesis.lat in English, Portuguese and Spanish.
All posts
Every post in English, most recent first.
-
Our first observation of an AI-assisted malicious group targeting small and medium-sized Brazilian fintech companies
An investigation by LESIS has identified a malicious campaign targeting small and medium-sized Brazilian fintech companies, using AI to accelerate the development of offensive tools, adapt payloads and support the…
-
Dependabot: automating dependency updates on GitHub
Understand how Dependabot automates vulnerability monitoring and dependency updates directly on GitHub.
-
Choosing the right method for sharing identifiers
How to choose between encryption, hashes, HMAC, APIs, and PSI when comparing datasets with personal identifiers.
-
Orientations for PII obfuscation and masking
Practical recommendations for masking common types of personally identifiable information without exposing useful fragments across systems.
-
Digital safety for children: preparing the next generation
Information security needs to reach people earlier. For a long time, this subject was treated as something restricted to professionals, companies, and technical teams. But reality has changed: children grow up…
-
Primitives and vulnerabilities
How thinking in primitives helps turn discrepancies between intent and real behavior into impact analysis.
-
State machine for vulnerability management
In many organizations, the vulnerability management process suffers from a recurring — yet frequently overlooked — problem: inconsistency in the definition and use of statuses. It is common to see the same statuses used…
-
Economic taxonomy of vulnerabilities
In cybersecurity, one of the most relevant questions and, at the same time, one of the hardest to answer precisely is: what is the financial cost of a vulnerability? Although there are several programs and practices…
-
Considerations for writing security reports
After days or weeks of work, you have identified relevant security issues, gained a solid understanding of the assessed environment’s attack surface, and gathered sufficient evidence to demonstrate real business risks…
-
Strengthening the Brazilian cybersecurity community through education
In 2026, LESIS will take another concrete step in its commitment to the sustainable development of the technology and information security ecosystem in Brazil. We will make a financial donation to the NGO Mente Binária…
-
Why we sponsor information security events
The year 2025 has been a milestone for LESIS. Between projects, research, and the growth of our presence in the market, we have also taken on a commitment we consider essential: to directly contribute to and with the…
-
Money for nothing, discounts for free: rocking the gift card loop
From time to time, the opportunity arises to conduct vulnerability research on e-commerce platforms. Although the context is similar, each opportunity is unique, as there are always peculiarities in every application…
Follow the work as it is published.
The LESIS Bulletin brings research, tools and events from the team to your inbox.