Product Updates

The following enhancements and improvements are now available to Censys ASM and Search customers.Censys ASMReceive actionable alerts about changes to your attack surface with Saved Query Automation.  Saved Query Automation enables you to send an alert to your integrations when an asset is added to or removed from a saved query. For example, you can configure ASM to send alerts when new risks are detected on assets or tags are newly added to assets.  This initial release features support for email alert delivery. Support for webhooks, Microsoft Teams, Slack, and Webex is forthcoming.  Learn more in this short lesson in the Censys Academy. Saved Query Automation is available to Censys ASM Advanced and Enterprise customers. Web entities that are sourced from Cloud Connectors will now be updated multiple times per day. Previously these assets were updated approximately once a day. Implemented an update to ensure that non-public assets are not ingested from Cloud Connectors.Rapid ResponseThe Censys Rapid Response team published information about and queries for the following vulnerability:Critical command injection vulnerability in EOL Zyxel NAS models exploited by botnet (CVE-2024-29973) The following query can be leveraged to identify all Censys-visible, public-facing Zyxel NAS326 and NAS542 instances. Note that Censys do not have visibility into firmware versions. Censys Search query: services.software: (vendor: “Zyxel” and product: {“NAS326”, “NAS542”}) Censys ASM query: host.services.software: (vendor: “Zyxel” and product: {“NAS326”, “NAS542″}) or web_entity.instances.software: (vendor:”Zyxel” and product:{“NAS326”, “NAS542”})Search and ASM Fingerprints Added the following fingerprints:Type Name Category Description Censys Search Censys ASM Query software Elkor Web Management Web Management Interface A web-based management platform for managing online content and operations. services.software:(vendor='elkor' and product='Elkor') host.services.software:(vendor='elkor' and product='Elkor') software MOVEit Transfer SFTP Managed File Transfer An SFTP client for the MOVEit managed file transfer service. services.software:(vendor='progress' and product='Progress') host.services.software:(vendor='progress' and product='Progress')

Saved Query Automation is a new feature in Censys ASM available to Advanced and Enterprise customers. Saved Query Automation enables you to send an alert to your integrations when an asset is added to or removed from a saved query.Many ASM customers already utilize queries to track items they deem noteworthy. Now, with Saved Query Automation, you can set alerts for queries of interest to automate monitoring activities.We have release a wealth of content to help you get started using Saved Query Automation quickly. For starters, our documentation has been updated to explain how to use it.If you’re seeking a detailed walkthrough of the setup process as well as some example queries you might want to use with Saved Query Automation, check out this interactive microlesson in the Censys Academy.For the more visually inclined, check out the demo video embedded below.We’d be happy to help with any questions you have about using this feature and learn about the kinds of queries you’re using with it. Let us know in the comments!