logo

Censys Blog

ID: 5bae04de-fe6e-513e-9a84-dae21a4b3734

STIX ID: identity--5bae04de-fe6e-513e-9a84-dae21a4b3734

Feed Type: skeleton

Earliest post: 2019-01-08

Latest post: 2026-07-31

The Censys blog shares research and insights on internet-wide threat visibility, attack surface management, and cybersecurity trends.

01/01/2020
10/21/2026
Title Date Published ↓Threat ScoreAuthorVisible
Frostbitten in France: A Danfoss StoreView Internet Exposure Report2026-10-1475True
5 Key Takeaways From Censys’ State of the Internet Report2026-10-1450True
The Ultimate Guide to Brand Protection with Censys2026-10-0955True
New on the Map — September 2026: 22 Protocol and Endpoint Scanners2026-10-0875True
DarkSword/Coruna Open Directory Finding Report2026-10-0778True
Introducing Censys CLI Skills: AI-Assisted Investigations at Scale2026-09-2470True
Mythic C2 Activity at Internet Scale2026-09-1565True
No One Inside The Machine2026-09-1160True
New on the Map — August 2026: 14 Protocol Scanners2026-09-0970True
2026 State of the Internet: The Exposure Notification Gap in ICS Devices2026-09-0872True
Neither Malware nor Harmless: Tracking the NPS Proxy Across the Internet2026-09-0455True
So Your CFO's Phone Has Been Pwned: A DFIR Journey2026-08-3178True
The Video That Plays You: Fake MP4 File Carries Malicious Payload2026-08-2875True
Open Directory Exposes Moobot Source Code and Ongoing Activity Post 2024 Court-Authorized Disruption2026-08-2772True
What the ERMAC Source Leak Says About HookBot2026-08-2575True
Mirai and Its Heirs: A Decade of Structural Neglect in IoT Security2026-08-0775True
Introducing Censys IOC Investigator: Run Every Lead Like You’ve Got Hours2026-07-3165True
DarkSword's Panel Sprawl: How One Body Hash Unravels a Six-Panel, Two-Codebase Operator Cluster2026-07-3180True
CISA Alert: Water Sector PLC Targeting2026-07-3180True
A Chill in the Air: Cl0p Targets Windchill, Another Enterprise Software Product2026-07-3078True
The State of the Internet Is Changing: AI Exposures Surge While Global ICS Trends Shift2026-07-2372True
Censys Is The OmniFeed: Crunch Your Own Threat Intelligence2026-07-2165True
Inside Russia’s Camera-Hacking Espionage Campaign2026-07-1685True
Roblox, Minecraft, and the Insidious Internet for Children2026-07-0270True
Why Are WordPress Sites Still Running EOL PHP?2026-07-0155True
AsyncRAT Family Threat Overview2026-06-2670True
UNC1151 Phishing Email Targeting Belarusian Politician Points to Multi-National Campaign2026-06-2685True
AdaptixC2: Fingerprinting an Open-Source C2 Framework at Scale2026-06-1775True
REDCap on the Internet: An Exposure Analysis2026-06-1688True
The Package That Never Shipped: Following a USPS Smishing Kit Through Censys DNS Data2026-06-1278True
How a Dangling DNS Entry Can Lead to a Subdomain Takeover2026-06-0555True
MCP Servers on the Internet2026-05-2765True
Iran-Linked Operators Suspected in ATG Breaches2026-05-1880True
The Ultimate Guide to Detection Engineering with Censys2026-05-1250True
Password Manager Infrastructure in the Wild: Surveying Prevalence, Internet Footprint, and Exposure2026-05-0660True
Microsoft: DigiCert Root Certificates Are Malware? Censys in SOC Triage2026-05-0410True
The cPanel Situation Is…2026-05-0185True
Oluomo: Microsoft OAuth AiTM Phishing Using a Naturalization-Form Lure2026-04-2272True
Beyond The Alert: Smarter and Faster IAM Triage with Censys2026-04-1735True
Rhadamanthys and the Limits of Private Sector Operations2026-04-1570True
Iranian-Affiliated APT Targeting of Rockwell/Allen-Bradley PLCs2026-04-0885True
Hackers Are Attempting to Turn ComfyUI Servers Into a Cryptomining Proxy Botnet2026-04-0675True
Cutting Through the Noise: A Technique-Based Approach to Hunting Web-Delivered Malware2026-04-0275True
BrewJack: Censys Researchers Uncover First Malware Campaign Targeting IP over Avian Carriers2026-04-010True
ICS & Iran, Part 2: Revisiting Exposure of Previously Targeted Devices2026-03-3060True
Under CTRL: Dissecting a Previously Undocumented Russian .Net Access Framework2026-03-2778True
Exposure Brief: Iranian-Linked Wiper Attack on Global Medtech Firm Stryker2026-03-1790True
NetSupport Manager: Tracking Dual-Use Remote Administration Infrastructure2026-03-1270True
Hunting Cameras in the Dark: Finding Internet Cameras Before Adversaries Do2026-03-1070True
ResidentBat: Belarusian KGB Android Spyware at Internet Scale2026-02-2478Kate Lake; Aidan Holland; Senior Security ResearcherTrue

1–50 of 206