New MySQL-Related Default Insecurity Affects 7500+ Apps

Censys published findings that SphinxSearch's insecure default configuration exposes the MySQL-compatible port 9306 with no authentication, enabling authentication bypass and potential data leakage; their Internet scan identified 7,576 affected instances (mostly in Russia and the US) and the recommended remediation is to bind the listener to localhost or place a host firewall in front of the service.