Your phone rings in the middle of the night, and when you answer, it’s a call you’ve been dreading. Your company has been the target of a cyberattack. The fallout? Unknown at the moment, but a million scenarios run through your mind. Has customer data been compromised? How much will this cost our organization? Will […]
When a public real estate company realized they lacked a comprehensive cloud inventory and found evidence of infection, they leveraged the Censys Attack Surface Management platform to gain greater visibility into all of their Internet-based assets. Since partnering with Censys, the company achieved a full view of their attack surface and generated significant ROI. Key […]
A brief history of Censys Search Censys continually scans the entire public IPv4 address space using automatic protocol detection to present the most accurate representation of the internet’s current state. This means that we see the internet for what it is: the good, the bad, and the ugly. Just this year we launched a report […]
Published on 09.19.2022 Part 1: Redis Takeaways There are 39,405 unauthenticated Redis services out of 350,675 total Redis services on the public internet. Almost 50% of unauthenticated Redis services on the internet show signs of an attempted compromise. Preface In this new series of posts, we decided to answer the question: “What is the state […]
If you were at Black Hat this year, or if you’ve been doing your homework online on the Internet at all, you’ve probably terms like EASM, ASM, Exposure Management, Attack Surface, and the many other variations that seem to be coming out of the woodwork. Are these tools? Capabilities? Or just the latest marketing […]
Published on 09.10.2022 Introduction Deadbolt, a ransomware campaign haunting QNAP NAS customers for the last few months, has seen a consistent number of infections on a fairly regular cadence. But recently, Censys has observed a massive uptick in Deadbolt-infected QNAP devices. The Deadbolt crew is ramping up their operations, and the victim count is growing […]
Super embarrassing when you’re hosting C2 infrastructure as a respectable enterprise, right? Or when the Red Team beats the Blue Team? Thanks to the popularization of Threat Intelligence, most organizations are aware of needing to block external connections to C2 infrastructure, but what happens when you’re the one hosting it? Sure, you can wait […]
According to the 2022 Verizon Data Breach Investigations Report, web servers are the top asset most commonly impacted in breaches. This is not surprising – after all, web servers often make up the bulk of an organization’s Internet-facing infrastructure, and therefore are more likely to be exposed than other types of digital assets. Finding hacked […]
Information Technology (IT) and Information Security (IS) teams have a number of predetermined steps and workflows in place for threat detection and response. Unfortunately, these workflows are often limited by common factors and are not as seamless or effective as they could be with the right tools in place. In fact, many IS and IT […]
Around June 24 2022, out of over 4.7 million hosts Censys observed in Russia, Censys discovered two Russian hosts containing an exploitation tool, Metasploit, and Command and Control (C2) tool, Deimos C2. Historical analysis indicated one of these Russian hosts also used the tool PoshC2. These tools allow penetration testers and hackers to gain access […]
The air was electric at Censys’ first in-person all-company event since the pandemic. It was also our first all-out multi-day hackathon event. This year’s theme: Integrate & Innovate. Engineers from all teams came together in exciting new ways, even roping in some sales, marketing, and product folks along the way. This week, we eschewed tradition […]
Cyber attackers are crawling the Internet constantly, looking for any vulnerabilities to exploit within organizations’ Internet-facing and cloud assets. Organizations and their security teams implement cloud data protection solutions, but unknown — and unsecured — assets remain. How can companies prevent and protect from attacks in a comprehensive way? They need to think like an […]
The other day, I found something weird on the Internet. A cluster of hosts was running an unrecognized service – all on port 55555, all on one autonomous system, and all with the same cryptic two-character service banner. A strange combination of characteristics This is unusual – particularly because of this unique banner message […]
You’ve vetted attack surface management vendors and integrated the tools to have complete visibility into the Internet and cloud with the right attack surface management solution. This is an essential step in risk-based vulnerability management. Now that you have 360-degree visibility into your attack surface, however, it can be daunting to know where to start […]
The cloud has quickly become one of the most important — and most exposed — spaces within your attack surface. With an ever-evolving attack surface that constantly impacts assets within cloud environments, it’s no surprise that 65% of high and critical security risks are found in cloud assets. Unfortunately, many attack surface management solutions do […]
With all the noise in the Attack Surface Management (ASM) market, we’re noticing a lot of confusion around what makes up the solutions in this category. This series will shine a light on what makes up an ASM solution so that you can better assess the tools on the market. As with any emerging category […]
While attack surface management (ASM) onboarding may fall lower on the priority list when it comes to considering threat detection and response solutions, the way you start has a significant impact on where your solution can take you. The best way to begin is to take on the perspective of the attacker; an attacker-centric approach […]
Attack surface management (ASM) is an emerging space for information technology (IT) and information security (IS) teams. But there is a common misconception among teams that ASM is designed to replace your other security software. Rather, ASM integrates seamlessly within your security stack, empowering all solutions to better protect both known and unknown assets across […]
Automation and quality data are key ingredients to any successful security program. Quality data in, means quality data out. Automation wherever possible means saving precious time for your security team. This is no different when it comes to External Attack Surface Management products. Today, Censys is excited to launch even more automation and visibility into […]
External Attack Surface Management (EASM) is becoming a top priority for security leaders in 2022. Why? Digital transformations and rapid cloud adoption have challenged many of the traditional views of cybersecurity. Workforces and business operations have quickly decentralized, widening protection gaps and turning risk management of an organization on its head. Security teams, who were […]
