2025 State of the Internet Report: Open Directories Time to Live
Discover how open directories are used for malicious purposes. Research reveals 50% vanish within a day. Learn why real-time threat intelligence is critical.
2025 State of the Internet: Digging into Residential Proxy Infrastructure
Censys ARC Team updates PolarEdge research with key clarifications on Mbed TLS certificates and residential proxy infrastructure. Read our corrected 2025 State of the Internet findings.
2025 State of the Internet: C2 Time to Live
Discover how long Cobalt Strike and Viper C2 servers survive online. Censys threat intelligence reveals TTL lifespans, port trends, and key insights for defenders.
Using the Censys API for Advanced Threat Hunting
Discover Censys's new value-counts API endpoint for faster adversary infrastructure pivoting. Batch multiple queries in one call—replacing Censeye's limitations with efficient threat hunting.
Introducing Additional Open Directory Intelligence
Discover how enhanced open directory intelligence helps threat hunters unmask adversary operations. Explore new tools for detecting malicious files, exploit kits & suspicious directories proactively.
Streamline Security Operations with the New Censys Chrome Extension
Instantly look up IP addresses, exposed ports, WHOIS & DNS data right in your browser. Speed up security investigations—no more tab switching.**
2025 State of the Internet: Malware Investigations
**Discover how Censys Research uncovered BeaverTail, Wainscot malware & Secret Blizzard APT infrastructure. Key findings from the 2025 State of the Internet Report.**
Maximize Cloud Visibility and Security: How the Censys ASM + Wiz Integration Closes the Gaps
Discover how Censys ASM + Wiz integration solves cloud visibility gaps, reduces attack surface risk, and secures exposed assets across AWS, Azure & GCP environments.
See What Attackers See: Introducing Web Screenshots on the Censys Platform
Censys Web Screenshots: Visually inspect exposed assets with recurring and on-demand screenshots. Help threat hunters, SOC analysts, and pentesters identify risks faster. Beta now live.
2025 State of the Internet: Notable Incidents
Explore Censys' 2025 State of the Internet Report: deep analysis of Cl0p ransomware, Cleo file transfer vulnerabilities (CVE-2024-55956), and key 2024 threat intelligence findings.
Introducing the new Censys MCP Server
Censys MCP Server gives AI agents real-time access to the Censys Internet Map. Hunt threats, triage incidents & automate security workflows at machine speed—no custom code required.
ICS and Iran: Exposure of Previously Targeted Devices
**Discover research on Internet-exposed critical infrastructure devices targeted by Iranian threat actors, including Unitronics PLCs and more. Learn key risks and exposure trends.**
Iran's Internet: A Censys Perspective
Iran's internet blackout since June 18, 2025: Censys research tracks host visibility, ASN recovery rates, and TIC transit bottlenecks across Iranian networks.
Poking at the Flodrix Botnet
Flodrix botnet exposed: How a C2 server misconfiguration revealed 745 compromised hosts exploiting CVE-2025-3248 in Langflow AI. Threat intelligence analysis.
Cert Happens. Protecting Your Brand from Phishy Lookalikes with Censys Collections
Discover how Certificate Transparency (CT) log monitoring protects your domains from malicious certs, phishing & shadow IT. Learn how Censys makes CT monitoring easy.
ASM CVE Exploit Context: A Smarter Way to Prioritize Vulnerabilities
Censys ASM's new CVE Exploit Context feature helps prioritize vulnerabilities with real-world exploit data. Cut through the noise—see which CVEs attackers target most.
Unmasking the Infrastructure of a Spearphishing Campaign
Discover how 16 open directories with obfuscated VBS files deploy RATs like Remcos, AsyncRAT, DCRat & LimeRAT via a 3-stage dropper system linked to APT-C-36.
Internet-scale Proactive Threat Hunting and Detection
Censys Threat Hunting Module is now generally available! Track adversary infrastructure, detect emerging threats, and gain unparalleled Internet intelligence. Explore the new Censys Platform.
Introducing the New Censys Threat Hunting Module: Proactive Defense for Modern Threats
Discover the new Censys Threat Hunting Module — proactively track adversary infrastructure, accelerate investigations, and dismantle threats before they strike. See a demo today!
Turning Off the (Information) Flow: Working With the EPA to Secure Hundreds of Exposed Water HMIs
Censys researchers found 400 exposed water facility HMIs online—40 fully unauthenticated. Learn how critical infrastructure risks were discovered and remediated.
