Skip to main content

General security topics

Talk about general security topics, using Censys and other tools to discover and investigate potential threats, and more

27 Topics
MattK_Censys
MattK_CensysCensys Community Manager
posted in Censys Rapid Response
Advisory: regreSSHion RCE Vulnerability in OpenSSH Server (CVE-2024-6387)

The Censys rapid response team has released its rapid response advisory on the recently disclosed RCE vulnerability in OpenSSH. Check out the post for full information on exploitation details and potential impact. The team has provided the following queries to use related to this vuln: Censys ASM Risk query: risks.name=”Vulnerable OpenSSH [CVE-2024-6387]” If you have any questions about this vuln or have suggestions for detecting with Censys, leave them here!

310
MattK_Censys
MattK_Censys
MattK_CensysCensys Community Manager
posted in Other security topics
Tracking the TellYouThePass Ransomware Campaign

The recently disclosed CVE-2024-4577 PHP vulnerability has been rapidly weaponized by the TellYouThePass ransomware gang to breach servers and encrypt files since around June 7, 2024. Censys published a live dashboard tracking publicly exposed infected hosts, observing around 1,000 as of June 13, primarily geolocated in China. The Censys Research Team first wrote about this issue in an advisory published on June 10, 2024: https://censys.com/cve-2024-4577/. This latest blog expands upon the evolving exploitation of the vulnerability, the TellYouThePass campaign, and the team’s observations regarding compromised hosts. Read it here.

210
MattK_Censys

Badge winners

Show all badges
Terms & ConditionsCookie settings
Censys logo

censys.com | Knowledge Base | Censys Search | Contact Us