We are happy to announce a feature release that includes a new dashboard, on-demand remediation validation, and integrations for Jira and Tenable.sc for our Attack Surface Management (ASM) platform. The release and improvements came from prioritizing user experience and working customer feedback into development for the ASM platform. With the addition of these features, Censys […]
Traditionally, Censys has focused on “deep” scans — scans which do a full analysis of the service behind them and break out key values into fields to be searched on later. Some protocols were captured by banner grabs of “UNKNOWN” services and were just untagged, making them searchable but not easily. For example, IRC servers […]
Chained vulnerabilities lead to remote command execution Authors: Mark Ellzey, Greg Gaylor What is the Issue? The ProxyLogon vulnerabilities, publicly disclosed in March and discussed in our blog post Microsoft Exchange 0-day Vulnerabilities, have since been patched, but a similar Microsoft Exchange attack has been discovered. DEVCORE Researcher “Orange Tsai” published their findings of a […]
Censys has introduced a new add-seeds CLI command for the censys-python project that enables customers to automate adding seeds to their attack surface based on search terms from Censys Search. This is an extremely powerful means of customizing your attack surface. Finding unknowns is hard An organization’s attack surface can be complex. With hosts […]
In 2017, a Verizon Wireless partner unintentionally misconfigured access controls for an Amazon S3 service, exposing an approximate 6 million records containing customer names, contact information, home addresses, account financials, and even account pins. Verizon was privately informed of the exposure on June 13th, 2017, and the misconfiguration was remediated on the 22nd. While […]
Your External Attack Surface Is More Important Than Ever In 2020, an estimated 73% of cybersecurity incidents involved external cloud assets, according to the Verizon Data Breach Investigations Report. The disappearance of network perimeters, rise of shadow IT, and exposure from small cloud misconfigurations have fundamentally changed how data breaches occur in practice and shifted […]
Censys uncovered over 2,000 devices whose primary purpose is to manage and monitor a system’s electrical sockets remotely. In many cases, the only thing between a server’s physical off-button and a malicious user is a simple login form, and in a handful of cases, no authentication or security at all. As engineers, we often talk […]
This is a quick guide with translated query syntax for the new Censys Search 2.0 which is free for community users. The following queries help practitioners identify potential assets and other infrastructure associated with SolarWinds Orion. For more information about the SolarWinds incident and global impact, please see our detailed write-up here. 1. Find exposed […]
“[On the cloud] what data lives where becomes a slightly different problem … the barrier to entry is so low. It is easy to spin up an instance or a windows VM in Azure … and it is important to have some visibility and governance, so you provide accountability for those things, relative to what […]
There is a rapid transformation underway and that is the migration into the cloud. The traditional on-premise environment has been redefined as organizations migrate to cloud environments and the need for a remote workforce increases. To address these changes with an evolving security posture, organizations must start with the foundation — knowing what you need […]
Daunte Wright Tragedy We would like to address the tragic news of the death of Daunte Wright at the hands of police in Brooklyn Center, MN. As a company, we do not condone police violence. We grieve for this loss, and for the pain and suffering of Mr. Wright’s family, friends and community. Mr. Wright’s […]
An Overview A PWC report on global M&A trends for 2020 noted that the “pandemic and recent geopolitical developments have already led most companies to the same conclusions, pushing both deal volumes and values higher … particularly for digital and technology assets”. In this blog, I will highlight key benefits of attack surface management when […]
What is the issue? On March 10, 2021, a security advisory was released by F5 including 7 vulnerabilities, 4 of which are critical remote code execution vulnerabilities impacting all BIG-IP modules and a significant number of BIG-IQ products. On March 10, 2021, Censys identified 440,882 distinct hosts running BIG-IP products around the globe, indicating significant […]
Have you ever visited a website and you see this instead of the webpage? If you’re like most folks, you do what your browser says and you “STOP!” What does a warning like this tell you anyway? Well, it can be a number of things, which we will flush out in more detail later in […]
Every day at Censys we hear a variety of scenarios security teams encounter, many of which have severe consequences to the business. Some of the common ones we’ve heard are: These scenarios happen all the time and across industries. While each has their own set of specific challenges, cleaning up assets using end-of-life (EOL) […]
What’s the issue? Three vulnerabilities were recently released by VMware’s security advisory and impact vCenter Server or ESXi — CVE-2021-21972, CVE-2021-21973, CVE-2021-21974. Impacted Versions of vCenter: Impacted Versions of ESXi: However, CVE-2021-21972 is a critical remote code execution vulnerability according to Tenable. Using the data that powers our ASM Platform, the Censys team found 6,868 […]
About a year ago, Censys began scanning public IPv4 addresses on 2,000 ephemeral ports in addition to ports with popular IANA-assigned services. We’ve found that an astounding number of services run on unassigned ports. We also found that many protocols run on ports assigned to other services. In response, we’ve changed our approach to scanning […]
When walking customers and prospects through their attack surface, as discovered by the Censys Attack Surface Management (ASM) Platform, one of the biggest surprises tends to be the number of web hosting providers that are affiliated with their organization. Censys can help highlight both the knowns and unknowns of your web hosting footprint. Our research […]
Do you use Censys? Have you ever used Censys Search? Chances are, if you’re a threat hunter or security researcher, the answer is yes. Every week Censys Search has thousands of active users, the vast majority are threat hunters and information security researchers. Censys Search, our complimentary offering, is a valuable tool to track down […]
This blog post was last updated on: February 1, 2021 This will be the last blog update summarizing our visibility of Internet-facing Orion hosts from mid-December through January 2021. Censys has continued to update this blog with the purpose of understanding global trends and impact around Internet-facing Orion hosts. As of January 31, 2021, Censys […]
