Thoughts on Vulnerability Response in the Era of the Vulnpocalypse and PHP2Shell
After "Black October," ARC researcher Himaja Motheram reflects on how well we're protecting aging software in the face of emerging AI threats.
Topic
50 posts
After "Black October," ARC researcher Himaja Motheram reflects on how well we're protecting aging software in the face of emerging AI threats.
Get details of how PHP2Shell unfolded, why counts differ, and how Censys builds its map of Internet threats and vulnerabilities.
See what’s really running on your website. Censys ASM’s web scanning surfaces hidden risks across your attack surface, automatically.
DLP monitors movement. Censys discovers exposure. You need both; this blog shows you how to find the second one, with queries you can run today.
Dangling DNS records can expose organizations to subdomain takeover. Learn how attackers exploit them and how to stop it.
AI models like Claude Mythos are compressing the exposure timeline. Learn how Censys ASM and Censys Platform help teams discover, prioritize, and operationalize internet-facing risk.
Learn why complete Internet visibility is critical to CTEM and exposure management programs, and how to achieve it with Censys.
Learn about attack surface mapping and analysis and and why they're critical to modern security operations.
Introducing Cloud Asset Context in Censys ASM—enrich attack surface management with cloud tags, ownership data & metadata from AWS, Azure, GCP & Wiz for faster remediation.
Discover how exposed ports create security risks and why Attack Surface Management (ASM) is critical. Learn to protect your organization's digital footprint.
Discover how Censys ASM Insights Experience transforms attack surface data into actionable dashboards. Track exposures, ensure software compliance, and reduce risk faster. Learn more.
Discover how External Attack Surface Management (EASM) protects Critical National Infrastructure from accidental exposures, HMI vulnerabilities, and evolving cyber threats. Learn key strategies from Censys.
Discover the Censys ASM MCP Server—query your attack surface data with AI using natural language. Prioritize risks, automate triage, and accelerate investigations.
Discover Censys ASM MCP Server — run context-rich attack surface investigations using AI. Detect new assets, risks & vulnerabilities faster to improve MTTD.
Discover how Censys ASM + Wiz integration solves cloud visibility gaps, reduces attack surface risk, and secures exposed assets across AWS, Azure & GCP environments.
Censys ASM's new CVE Exploit Context feature helps prioritize vulnerabilities with real-world exploit data. Cut through the noise—see which CVEs attackers target most.
Censys Risk Evidence cuts alert triage time by explaining why risks fired with clear, linked scan data. Reduce false positives and accelerate threat detection in your SOC.
"Discover the Censys Query Assistant: search the internet using natural language in any language. Simplify threat hunting & attack surface management—no syntax needed."
Edge device vulnerabilities surged in 2024, driving a 34% increase in breach exploitation. Verizon DBIR reveals growing attack surface management challenges for defenders.
Discover why edge security devices are now top targets for attackers. Learn about critical vulnerabilities in VPNs, firewalls & how attack surface management can protect your network.
Discover why 2024 was healthcare's worst year for cyberattacks. Learn key challenges in attack surface management and how Censys Search helps protect patient data.
Discover how rogue Minecraft servers on corporate infrastructure pose serious security risks. Learn how Censys Attack Surface Management and Censys Search detect hidden threats.
Healthcare cyberattacks are surging—breaches up 93% since 2018. Learn why cybercriminals target healthcare and how attack surface management can strengthen defenses.
Discover how infrastructure monitoring and Attack Surface Management (ASM) work together to secure your digital ecosystem.
Discover how Attack Surface Discovery helps identify hidden vulnerabilities in internet-facing assets. Learn how Censys delivers real-time attack surface management visibility.
Manufacturing leads ransomware attacks in H1 2024 with 281 victims. Learn key findings from GRF's report and how to protect your attack surface from threats.
Ransomware accounts for 30% of cyber incidents with $270B+ in losses. Learn how exposed public-facing assets are the #1 entry point and how to reduce your attack surface.
Discover how Continuous Attack Surface Management delivers total visibility into vulnerabilities. Learn how to protect digital assets with real-time monitoring and risk prioritization.
Discover how Attack Surface Management (ASM) strengthens vulnerability management by eliminating blind spots, uncovering unknown assets, and improving cybersecurity defense.
Join the new Censys Community! Connect with fellow users, discover powerful Search & ASM queries, access discussion forums, and share Attack Surface Management best practices. Sign up free today!
Discover how Attack Surface Management helps identify third-party vulnerabilities before attackers do. Learn key strategies to secure your supply chain with Censys Search.
Discover why asset attribution is key to reducing Mean-Time-to-Remediate (MTTR) and strengthening your attack surface management. Learn how to respond faster to threats.
Discover why cloud security assessments are critical for managing evolving cloud risks. Learn how to tackle misconfigurations, gain visibility, and reduce your attack surface.
Haven’t had a chance to tune in to some of our recent webinars? Catch up on what you’ve missed with these on-demand recordings! You can stream the recordings at any time from the links below. Profiles in Threat Hunting: Finding Threats by Observing Behaviors Presenters: Censys Senior Security Researcher Emily Austin; Censys Director of Federal […]
Last week, a security researcher known as “Janggggg” published a proof of concept (PoC) exploit for the latest “ProxyNotShell” vulnerabilities in Microsoft Exchange that were discovered in September. ProxyNotShell is already confirmed to be actively exploited by a Chinese nation-state threat actor at the time of the vulnerability announcement by Microsoft. The attack was initially […]
Your phone rings in the middle of the night, and when you answer, it’s a call you’ve been dreading. Your company has been the target of a cyberattack. The fallout? Unknown at the moment, but a million scenarios run through your mind. Has customer data been compromised? How much will this cost our organization? Will […]
If you were at Black Hat this year, or if you’ve been doing your homework online on the Internet at all, you’ve probably terms like EASM, ASM, Exposure Management, Attack Surface, and the many other variations that seem to be coming out of the woodwork. Are these tools? Capabilities? Or just the latest marketing […]
Information Technology (IT) and Information Security (IS) teams have a number of predetermined steps and workflows in place for threat detection and response. Unfortunately, these workflows are often limited by common factors and are not as seamless or effective as they could be with the right tools in place. In fact, many IS and IT […]
The cloud has quickly become one of the most important — and most exposed — spaces within your attack surface. With an ever-evolving attack surface that constantly impacts assets within cloud environments, it’s no surprise that 65% of high and critical security risks are found in cloud assets. Unfortunately, many attack surface management solutions do […]
With all the noise in the Attack Surface Management (ASM) market, we’re noticing a lot of confusion around what makes up the solutions in this category. This series will shine a light on what makes up an ASM solution so that you can better assess the tools on the market. As with any emerging category […]
While attack surface management (ASM) onboarding may fall lower on the priority list when it comes to considering threat detection and response solutions, the way you start has a significant impact on where your solution can take you. The best way to begin is to take on the perspective of the attacker; an attacker-centric approach […]
Attack surface management (ASM) is an emerging space for information technology (IT) and information security (IS) teams. But there is a common misconception among teams that ASM is designed to replace your other security software. Rather, ASM integrates seamlessly within your security stack, empowering all solutions to better protect both known and unknown assets across […]
Automation and quality data are key ingredients to any successful security program. Quality data in, means quality data out. Automation wherever possible means saving precious time for your security team. This is no different when it comes to External Attack Surface Management products. Today, Censys is excited to launch even more automation and visibility into […]
External Attack Surface Management (EASM) is becoming a top priority for security leaders in 2022. Why? Digital transformations and rapid cloud adoption have challenged many of the traditional views of cybersecurity. Workforces and business operations have quickly decentralized, widening protection gaps and turning risk management of an organization on its head. Security teams, who were […]
Here’s something you may already know – your attack surface has grown significantly in the past few years. There are many reasons this is the case. COVID forced many workplaces to go remote; the push towards digital transformation has encouraged companies to speed up their cloud adoption; and the frequency of mergers and acquisitions have […]
Attack Surface ManAttack Surface Managementagement (ASM) is quickly emerging as a critical element of any digital security strategy. Within ASM, a technique called “Attribution” is foundational because it can automatically detect parts of an organization’s external attack surface that they didn’t realize even existed. And when attribution is automated and efficient, it can adapt to […]
The days before announcing an acquisition are heady ones. Your functional diligence teams, along with lawyers, bankers and often consultants, are scrambling through mountains of information provided by the target, getting ready for a “go/no-go” scenario rivaling any NASA launch. The cybersecurity team is a relatively new but very important player in the process. But […]
In 2020, Capital One was fined $80 million when a cloud misconfiguration resulted in the theft of personal data from 106 million customers. In 2018, Amazon S3 (cloud storage service) was responsible for around 30% of all records exposed, which led to high-profile breaches of the U.S. Department of Defense, Dow Jones & Co., […]
Attack surface management was reviewed by Forrester in a recent report to help IT decision makers in security and risk management better understand its function and value as part of the modern security tech stack. It’s no secret that the market for cybersecurity solutions is overflowing with options. How can IT decision makers thoroughly understand which solution […]
With new revelations like the Confluence code execution vulnerability, we are reminded how important immediate and accurate information about infrastructure is to security practitioners. Out-of-date software and exposed internal services are unfortunately common and can result in data loss and security breaches when vulnerabilities are uncovered. On-Demand Remediation Validation Now in the Censys ASM Platform, […]