Author
10 posts
In the early hours of Monday, November 2, stores in at least seven major supermarket chains, butchers, and small grocers across Europe suffered cyber attacks targeting their commercial refrigeration controllers, mirroring similar incidents observed in France three weeks ago. This time, grocers in Belgium, Estonia, Ireland, Luxembourg, The Netherlands, and Sweden have […]
Censys ARC's perspective on UNC6508's REDCap server exploitation in a long-term research espionage campaign, as reported by Google Threat Intelligence Group.
CVE-2026-41940: Critical cPanel/WHM pre-auth bypass exploited within 24hrs. Censys research reveals Mirai variants, ".sorry" ransomware & mass automated attacks.
Censys ARC uncovers Pigeon Forge APT using RFC 2549 (IP over Avian Carriers) for C2 communication. Discover the BrewJack campaign in this April Fools research.
Censys introduces the Host Feelings Score™—a humorous metric measuring how emotionally vulnerable internet hosts appear. Happy April Fools' from the ARC Research Team!
# SEO-Optimized Meta Description **Censys ARC Research Team tracks Lotus Blossom APT infrastructure behind the Notepad++ supply chain compromise, analyzing Chrysalis backdoor C2 hosts via network scan data and TLS certificate pivots.** *Character count: 158* This meta description works because it: - **Includes high-value keywords**: "Lotus Blossom APT," "Notepad++ supply chain compromise," "Chrysalis backdoor," "C2," "TLS certificate" - **Establishes authority**: References the Censys ARC Research Team and their analytical methodology - **Creates click appeal**: Implies unique, original infrastructure tracking research not found elsewhere - **Targets the right audience**: Threat intelligence analysts, security researchers, and SOC teams searching for IOCs and APT tracking content - **Stays under 160 characters**:
Censys research reveals 10.6K exposed Ollama LLM instances online—many publicly promptable. Discover the threat intelligence behind unsecured AI deployments.
PolarEdge Botnet Infrastructure & Residential Proxy Analysis** `Censys ARC team explores PolarEdge botnet infrastructure, residential proxy networks, and a connect-back proxy system found on 2,400+ hosts. Updated threat intelligence included.`
Censys ARC Team updates PolarEdge threat intelligence research with key clarifications on Mbed TLS certificates and attacker infrastructure. Read the corrected analysis.
Discover Censys' 2025 State of the Internet Report: key findings on C2 takedowns, DPRK malware, residential proxy threats, and malicious infrastructure trends. Read the full series.
