Zum Hauptinhalt springen
Echtzeit-Radar & Feeds
Alle RSS Feeds ➔
👥 Community & Social
Windows Tipps & SecurityGrafikkarte vor Überhitzung schützen: So geht’s(25.09.2026 um 08:00 Uhr)
••••••••••
Windows Tipps & SecurityGrafikkarte vor Überhitzung schützen: So geht’s(25.09.2026 um 08:00 Uhr)
••••••••••
Intelligence View
⚡ tsecurity.de Intelligence

Two Underused Public Sources for B2B Leads: ATS Boards and Steam

Most lead lists come from the same handful of paid databases, so everyone is selling to the same rows. The more interesting leads sit in public data that nobody bothers to shape. Here are two sources I packaged recently, and why each one…

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!

Most lead lists come from the same handful of paid databases, so everyone is selling to the same rows. The more interesting leads sit in public data that nobody bothers to shape. Here are two sources I packaged recently, and why each one works.






Hiring boards are a buying signal



When a company spins up a new team, it is about to buy the tools that team needs. That signal is public: most companies post their open roles on Greenhouse or Lever, and both expose clean JSON.




  • Greenhouse: https://boards-api.greenhouse.io/v1/boards/{token}/jobs

  • Lever: https://api.lever.co/v0/postings/{token}?mode=json



Give it a list of target accounts, resolve each to its board token, and you can see open roles by department and location. A company that just opened five security roles is a different prospect than one that is quiet. No key, no browser, so a run costs almost nothing.



The catch is coverage. Only companies on Greenhouse or Lever with a findable token show up, so passing an exact token gives the best result. Companies with no board come back as not found rather than wrong data.






Niche app stores hide whole industries



Game studios buy engines, middleware, marketing, localization and QA, but they are scattered and hard to list. Steam already indexes them. Its store search and app detail endpoints are keyless JSON.




  • search: https://store.steampowered.com/api/storesearch/?term=roguelike

  • detail: https://store.steampowered.com/api/appdetails?appids=...



Search by genre, read each game for the studio and website, then scrape the site for a contact email. Rank by review count and you reach studios with traction first. The app detail endpoint is rate limited, so throttle it, and the website field is sparse for small indies, so expect more partial leads than complete ones in that tier.






The pattern



Both of these follow the same idea: a public surface that already lists the entities you care about, plus a keyless endpoint that returns them as JSON. No login, no proxy, no paid plan. I packaged each as a pay per use scraper on Apify, the ATS Hiring-Signal Tracker and the Steam Game Studio Lead Scraper, with the first results of every run free so you can check the output before you pay. They are part of a growing set of keyless public data tools I keep shipping, and counting.



The takeaway holds either way. The best lead sources are the ones companies publish themselves.

1. Sofort-Triage & Abwehrmaßnahmen

SOC Incident Playbook: Remote Code Execution (RCE) Defense
Syntax validiert (0 Fehler)
title: Detect Exploitation - Two Underused Public Sources for B2B Leads: ATS Boards and Steam
id: fd76fcd9-6394-4e6c-8598-8792114880af
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-26
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access
Syntax validiert (0 Fehler)
rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-26"
        description = "YARA Signature for "
    strings:
        $str = "Two Underused Public Sources f" ascii wide
    condition:
        any of them
}
Syntax validiert (0 Fehler)
index=security sourcetype IN ("cisco:asa", "pan:traffic", "zeek_conn", "suricata", "WinEventLog:Security")
("Two Underused Public Sources for B2B Lea")
| stats count earliest(_time) as first_seen latest(_time) as last_seen by src_ip, dest_ip, dest_host, signature
| eval first_seen=strftime(first_seen, "%Y-%m-%d %H:%M:%S"), last_seen=strftime(last_seen, "%Y-%m-%d %H:%M:%S")
| sort - count
Syntax validiert (0 Fehler)
message: "*Two Underused Public Sources for B2B Lea*"
Syntax validiert (0 Fehler)
CommonSecurityLog
| where Message has "Two Underused Public Sources for B2B Lea"
| summarize EventCount = count(), FirstSeen = min(TimeGenerated), LastSeen = max(TimeGenerated) by SourceIP, DestinationIP, DestinationPort, Activity
| extend DetectionRule = "iShareStuff-CTI-Compiled"
| sort by EventCount desc

2. Cyber Threat Intelligence & Forensik

🎯
MITRE ATT&CK Matrix Navigator 14 Taktiken
Reconnaissance
-
Resource Development
-
Initial Access
Execution
Persistence
-
Privilege Escalation
Defense Evasion
Credential Access
-
Discovery
-
Lateral Movement
-
Collection
-
Command and Control
Exfiltration
-
Impact
tsecurity.de Cognitive Threat RAG
Fokus-Vektor:

Kognitive Analyse für identifizierte Bedrohung: Erhöhte Bedrohungslage im Bereich Two Underused Public Sources for B2B Lea.... Basierend auf 368k Vektor-Korrelationen werden sofortige Isolationsmaßnahmen für betroffene Endpunkte empfohlen.

🛡️ Angriffsfläche & Exposure

Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.

⚡ Empfohlene Sofortmaßnahmen
  • 1. Perimeter-Inspektion: Relevante Portfreigaben und exponierte Endpunkte unverzüglich scannen.
  • 2. Patch-Applikation: Hersteller-Hotfix einspielen oder betroffene Daemons in isolierte DMZ-Segmente überführen.
  • 3. Telemetrie & EDR-Alerts: Prozessaufrufe und Child-Processes auf anomale Shell-Spawns überwachen.
🔗 Semantisch verwandte Zero-Days MariaDB 11.7 VEC
Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten Two Underused Public Sources for B2B Leads: ATS Boards and Steam

Thematisch verwandte Begriffe: Underused, Public, Sources, Leads · 6 Treffer

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-100620 | Capgo CLI (npm package @capgo/cli) through 7.98.2 is affected by an ove…
Advisory →
tsecurity.de Icon
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag