AsyncRAT Family Threat Overview
New Censys ARC research identifies more than a dozen live C2 infrastructure instances as descendants of AsyncRAT.
UNC1151 Phishing Email Targeting Belarusian Politician Points to Multi-National Campaign
New Censys ARC research discovers that UNC1151's phishing email to a Belarusian politician is linked to a much broader campaign.
AdaptixC2: Fingerprinting an Open-Source C2 Framework at Scale
Censys ARC found 412 web properties across 236 hosts running AdaptixC2, an open-source post-exploit framework. Get the IOCs + full breakdown.
REDCap on the Internet: An Exposure Analysis
Censys ARC's perspective on UNC6508's REDCap server exploitation in a long-term research espionage campaign, as reported by Google Threat Intelligence Group.
Powering the AI-Enabled SOC with Censys Internet Intelligence and Google SecOps
Censys enriches Google SecOps with real-time Internet intelligence for faster triage, threat hunting, and incident response for the AI SOC.
The Package That Never Shipped: Following a USPS Smishing Kit Through Censys DNS Data
It Starts With a Text Message You know the message. Everyone has gotten one. A package could not be delivered, there is an unpaid customs fee or a bad address, and here is a helpful link to fix it. This one pointed at: Believe it or not, xupqnqz[.]one is not USPS (United States […]
How a Dangling DNS Entry Can Lead to a Subdomain Takeover
Dangling DNS records can expose organizations to subdomain takeover. Learn how attackers exploit them and how to stop it.
Make Your Security Tools Smarter with Internet Intelligence
Here's why alert context is critical and how to strike the right balance of contextual information without information overload in your SOC.
The Mythos Era of Threat Defense: Censys Sees Exposures and Adversary Infrastructure First
AI models like Claude Mythos are compressing the exposure timeline. Learn how Censys ASM and Censys Platform help teams discover, prioritize, and operationalize internet-facing risk.
Why Internet Intelligence Is the Foundation of Exposure Management and CTEM
Learn why complete Internet visibility is critical to CTEM and exposure management programs, and how to achieve it with Censys.
MCP Servers on the Internet
Exposed MCP servers present significant risks. Censys ARC identified 12,520 Internet-accessible MCP services. Get the full analysis.
The Oracle Problem: Why AI SOCs Need Ground Truth Context
Learn how Palo Alto Networks' Cortex and Censys work together to transform the modern SOC.
What the 2026 Verizon DBIR Signals About Internet Intelligence and External Visibility
2026 Verizon DBIR: AI is accelerating the threat landscape. Learn why Censys Intelligence is critical for cybersecurity defenders.
Iran-Linked Operators Suspected in ATG Breaches
Censys finds 6,502 ATG services on 6,057 hosts reachable on the public internet today. Every ATG service indexed in Censys is reachable without authentication.
The Ultimate Guide to Detection Engineering with Censys
Vendor detection is not enough. This guide covers the detection engineering, why Internet context matters, and which Censys features help.
Password Manager Infrastructure in the Wild: Surveying Prevalence, Internet Footprint, and Exposure
Censys research reveals 31,000+ password manager instances exposed online. Discover which tools are most common, vulnerability risks, and key security findings across Vaultwarden, Bitwarden & more.
Microsoft: DigiCert Root Certificates Are Malware? Censys in SOC Triage
When a certificate looks like malware: How the Cerdigent false positive alarmed Windows admins and how Censys Platform helps SOC analysts triage certificate-based threats fast.
The cPanel Situation Is…
CVE-2026-41940: Critical cPanel/WHM pre-auth bypass exploited within 24hrs. Censys research reveals Mirai variants, ".sorry" ransomware & mass automated attacks.
Oluomo: Microsoft OAuth AiTM Phishing Using a Naturalization-Form Lure
Censys uncovers OLUOMO, a sophisticated AiTM phishing cluster harvesting Microsoft credentials via fake document portals, Azure proxies, and compromised sites.
Beyond The Alert: Smarter and Faster IAM Triage with Censys
**Discover how Censys enrichment transforms SOC identity alerts. Learn to triage IAM, SSO, MFA & VPN auth signals faster using Reputation Score and ARC intelligence.**