A Chill in the Air: Cl0p Targets Windchill, Another Enterprise Software Product
Cl0p's recent targeting of Windchill shows that Internet-exposed enterprise back office software remains a high value target for threat actors.
Author
Emily Austin
9 posts
Password Manager Infrastructure in the Wild: Surveying Prevalence, Internet Footprint, and Exposure
Censys research reveals 31,000+ password manager instances exposed online. Discover which tools are most common, vulnerability risks, and key security findings across Vaultwarden, Bitwarden & more.
ICS & Iran, Part 2: Revisiting Exposure of Previously Targeted Devices
Tracking Internet exposure of ICS devices targeted by Iranian threat actors. Research covers Unitronics PLCs, Orpak SiteOmat, Red Lion & Tridium Niagara trends.
Unpacking the Oracle EBS Debacle: Industries, Geography, and MOVEit Comparisons
Cl0p exploits Oracle E-Business Suite zero-day (CVE-2025-61882) in extortion campaign. Censys research reveals exposed instances across industries and compares tactics to 2023 MOVEit attack.
Disallow: /security-research? Crypto Phishing Sites' Failed Attempt to Block Investigators
Censys uncovers 60+ crypto phishing pages impersonating Trezor and Ledger wallets. Learn how robots.txt analysis exposed this campaign and its unusual tactics.
Internet Archaeology: A Decade of Defaced Routers?
Over 330 Ubiquiti devices still display "HACKED-ROUTER" defacement banners dating back to 2016. Censys research reveals compromised infrastructure lingering for nearly a decade.
ICS and Iran: Exposure of Previously Targeted Devices
**Discover research on Internet-exposed critical infrastructure devices targeted by Iranian threat actors, including Unitronics PLCs and more. Learn key risks and exposure trends.**
Unlocking the Potential of X.509 Certificate Data
We are celebrating the launch of Certs 2.0 – the largest X.509 certificate repository in existence! ???? Our new Certs 2.0 index provides enhanced access to our extensive billion certificate repository, with more efficient and granular searching capabilities. Additional benefits include: With all these new goodies available, we wanted to take a moment and review why […]
‘Tis the Season: ???? A Look Back at the Critical Log4j Vulnerability
It’s been just over a year since the infamous log4j vulnerability was publicly disclosed, sending security teams into a patching frenzy as holidays loomed ahead. The vulnerability, dubbed Log4Shell, is a critical remote code execution (RCE) vulnerability in the Apache log4j logging library. It allows a threat actor to send a request with a […]