New on the Map — September 2026: 22 Protocol and Endpoint Scanners

Censys mapped 22 new Internet scanners and spotlighted six exposed services and protocols that can leak sensitive metadata or enable remote control—most notably 11,180 Cisco SD‑WAN control planes disclosing organization identifiers and services tied to Known Exploited Vulnerabilities and active exploitation, exposed fuel-site controllers and alarm stations, Hikvision camera management, STOMP/ActiveMQ brokers with CVEs and a history of ransomware exploitation, and Pigeonhole mail-filtering instances. Organizations are advised to run the provided platform queries, confirm which services are Internet‑reachable, and patch or restrict access to mitigate active and high-risk exposures.