Skip to main content

Other security topics

General security topics and discussion

  • 7 Topics
  • 7 Replies
7 Topics
L
luca.malatestaNew Participant
asked in Other security topics
Hystorical data retention for ip scan

Hello, I need to do a historical search of the open ports of one of our public IPs, I wanted to know if by buying Censys credits I can do this historical search and how far back I can go.Thanks

221
MattK_Censys
mchrisos_Censys
mchrisos_CensysCensys Team
posted in Other security topics
New: Investigating the Vast World of ICS Coverage: Part 2

Last week, the Censys research team set out to test the existence of ICS protocols on port tweaks. Instead of picking one ICS protocol as a proof-of-concept analysis, we set out to investigate all of them. 🕵️ Read part 2 here.

100
mchrisos_Censys
mchrisos_Censys
mchrisos_CensysCensys Team
posted in Other security topics
New: Investigating the Vast World of ICS Coverage: Part 1

At Censys, our goal is to capture an accurate representation of the Internet at any given time. However, not only is the Internet large, but our investigations and prior research show that many of the services on the Internet do not respond on their standard port. While you would expect Modbus to be found only on port 502, the reality is that there is a plethora of Modbus on other, non-standard ports.Our research team put together a new blog about how we use independent measurement and research to verify where to scan in a more focused manner, concentrating on ICS protocols as a case study. You can check it out here. 

90
mchrisos_Censys
S
snkhanNew Participant
asked in Other security topics
Intermittent Censys API Failures

Good morning, We have been seeing intermittent failures with the Censys Search API all weekend, with a further stream of 500 failures this morning. A number of searches via the GUI are also returning 0 results.  We have checked the Censys status board, which does not suggest that there are availability issues with the API. Please can you investigate. 

806
MattK_Censys
HimajaM_Censys
HimajaM_CensysCensys Team
posted in Other security topics
New: Censys Internet of Healthcare Things (IoHT) Research

Hi folks, We just published a report examining the most commonly exposed types of assets belonging to the Internet of Healthcare Things (IoHT) 🏥 in Censys data.Ransomware and data breaches in healthcare continue to rise, and effective exposure management in this sector is more critical than ever. Healthcare organizations often have sprawling, decentralized infrastructure and under-resourced IT departments, which create significant challenges.We examined the global external attack surface of publicly accessible medical devices and IoHT applications and found legacy protocols, unauthenticated medical image databases, and data platforms with histories of exploited vulnerabilities.You can read the full report here: https://censys.com/state-of-internet-of-healthcare-things/ 

310
HimajaM_Censys
RachelH_Censys
RachelH_CensysCensys Team
posted in Other security topics
Manufacturing Use Case Queries for Search & ASM

Hi there! Censys recently published a blog about the prevalence of ransomware attacks on manufacturing firms, based on new research from GRF. Within the blog, our team included some manufacturing use case queries you can run in Censys Search and Censys ASM to identify and monitor relevant protocols, like those for building automation, PLC communication, HMI/SCADA, and more. Examples: Building Automation ProtocolsBACnetSearch Query: services.service_name:BACNET ASM Query: host.services.service_name:BACNETHMI/SCADARed Lion CrimsonSearch Query: services.service_name:REDLION_CRIMSON or services.software:(vendor=”Red Lion” and product=”Crimson”) ASM Query: host.services.service_name:REDLION_CRIMSON or host.services.software:(vendor=”Red Lion” and product=”Crimson”) You can check out the full article here: https://censys.com/top-targets-the-impact-of-ransomware-on-manufacturing/

140
RachelH_Censys
MattK_Censys
MattK_CensysCensys Community Manager
posted in Other security topics
Tracking the TellYouThePass Ransomware Campaign

The recently disclosed CVE-2024-4577 PHP vulnerability has been rapidly weaponized by the TellYouThePass ransomware gang to breach servers and encrypt files since around June 7, 2024. Censys published a live dashboard tracking publicly exposed infected hosts, observing around 1,000 as of June 13, primarily geolocated in China. The Censys Research Team first wrote about this issue in an advisory published on June 10, 2024: https://censys.com/cve-2024-4577/. This latest blog expands upon the evolving exploitation of the vulnerability, the TellYouThePass campaign, and the team’s observations regarding compromised hosts. Read it here.

210
MattK_Censys

Badge winners

Show all badges
Terms & ConditionsCookie settings
Censys logo

censys.com | Knowledge Base | Censys Search | Contact Us