The urgent call to Codesnag

A fast-growing Indian smart-LED brand lost everything at once: the app went down, every service with it, and the attackers wiped the cloud servers on their way out. It was a zero-day against the IoT estate, and the company's own team could not get back in.

Codesnag's incident response team restored control in three days. That part is the headline, but it is not the useful part.

The useful part is what the investigation turned up afterwards. The Android and iOS applications carried vulnerabilities of their own — the route in had been sitting in the product the whole time, not in the infrastructure everyone was staring at. Lost data was recovered and the data lakes were hardened.

An incident is rarely a single door. It is a door somebody found, plus the several others nobody had checked. Closing only the first one buys you a few months.