So Your CFO's Phone Has Been Pwned: A DFIR Journey
Learn how to pivot from an IOC to a full DFIR history with two real-world examples that draw on recent Censys ARC research.
Topic
Threat Detection
18 posts
Hiding in Plain Sight: Tracking Bulletproof Hosting and Abused RDP Infrastructure
Discover how bulletproof hosting fuels cybercrime and how RDP certificate artifacts enable threat detection at scale. Research by Censys on tracking abuse-tolerant infrastructure.
Announcing the Threat Hunting MCP Server
Discover the Censys Threat Hunting MCP Server—track adversary infrastructure using natural language AI. Streamline threat detection with conversational, iterative workflows.
Announcing the Investigation Manager: A New Way to Hunt for Adversary Infrastructure
Introducing Investigation Manager: a visual workspace in Censys Threat Hunting Module for tracking adversary infrastructure. Pivot with CensEye, map threats, and streamline investigations.
Evidence-Based Security Is Just Better Security: How to Accelerate Your Risk Triage and Response
Censys Risk Evidence cuts alert triage time by explaining why risks fired with clear, linked scan data. Reduce false positives and accelerate threat detection in your SOC.
The Persistent Threat of Salt Typhoon: Tracking Exposures of Potentially Targeted Devices
Track Salt Typhoon's attack surface: Censys research reveals 6-month exposure trends for Cisco, Sophos, Ivanti & Fortinet devices targeted by this Chinese state-sponsored threat actor.
Securing the Signal and Protecting the Grid: Facing the Cybersecurity Risks Across Telecom
Discover how Salt Typhoon exposed telecom cybersecurity gaps in critical infrastructure. Learn about threat detection and exposure management strategies to combat nation-state attacks.
Continuous Threat Exposure Management (CTEM)
Discover how Continuous Threat Exposure Management (CTEM) transforms threat detection with proactive adversary infrastructure monitoring.
Actionable Threat Intelligence
Discover how actionable threat intelligence reduces cyber risk. Learn about adversary infrastructure, threat detection, and the Censys Platform's role in proactive security.
Top Ransomware Attack Vectors: How to Defend Against Them
# SEO Meta Description **Ransomware attacks surged 70% in 2023. Learn top attack vectors, prevention strategies, and how proactive threat intelligence can strengthen your ransomware defense.** *(158 characters)* This meta description works because it: - **Leads with a compelling statistic** (70% surge) to grab attention - **Includes key search terms**: ransomware attacks, attack vectors, prevention strategies, threat intelligence, ransomware defense - **Creates urgency** with the data point about the surge - **Promises actionable value** ("Learn...strategies") - **Stays under 160 characters** for full display in search results
Mission Critical Intelligence: Why This Government Agency Partners with Censys to Understand the Threat Landscape
When ZMap, the world’s first global, open-source internet scanner, was released in 2012, it immediately attracted tens of thousands of users from leading government agencies who conducted critical searches to understand the emerging digital threat landscape. Today, Censys’ proprietary Internet Map is the most comprehensive, up-to-date collection of global internet infrastructure enriched with critical context […]
5 Ways to Win Buy-In for Better Internet Intelligence
Internet intelligence is at the heart of any successful cybersecurity strategy. Whether you’re proactively searching for suspicious activity or reacting to a CVE that just dropped, you can’t do your job well without if you don’t have a full view into today’s evolving threat landscape. However, sometimes security teams and stakeholders within the organization aren’t […]
Why This European Government Agency Uses Attack Surface Management
Attack surface management (ASM) is becoming an integral, value-add strategy for cybersecurity teams across industries, including those in government. Our own partnerships with government agencies around the world highlight how ASM complements government threat hunting and response efforts. Teams use ASM tools like the Censys Attack Surface Management Platform to gain greater visibility into […]
6 Steps Threat Profilers Can Follow to Uncover Ransomware (and Other Nefarious Activity)
Ransomware attacks have dominated headlines in recent years, as attackers take aim at an increasing variety of targets, from school districts to critical infrastructure networks. Ransomware accounted for 25% of all breaches in 2022, according to the Verizon Data Breach Investigations Report, and in early 2022, CISA reported that it had observed incidents of ransomware […]
Fresh Search Query "Recipes" (+ Actual Food Recipes) to Start Your 2023
Running an internet search query can be a lot like cooking a meal. Hang with us here … If you think about it, both cooking and querying rely on stepwise orders of operation – both follow “recipes,” if you will. For example, if you’re looking to uncover hacked web hosts, you’ll follow a series of […]
Why Did a Cybersecurity Company Choose Censys Data Over Competitors?
We know that fresh, accurate, and timely data is the key ingredient to any cybersecurity intel effort. Security teams can have all the tools and manpower in the world, but without access to the right data (the kind of data that also reduces false positives and minimizes noise) security efforts will ultimately fall short. […]
3 Reasons It's Time to Start Thinking Like an Attacker
A new cloud security ops goal for 2023? Start thinking like an attacker. No, seriously. If you’ve never thought about what it would be like to try to break-and-enter into your own organization’s cloud infrastructure – like really, truly thought about it – we’re here to say that it might not be a bad idea. […]
Understanding the Attack Surface of the Internet
In part-two of our Threat Detection, Defense & Remediation Using ASM series – based on this recent eBook from the Censys Research Team – we’re exploring the attack surface of the Internet. How is it evolving, and what do changes in the Internet’s attack surface mean for corporate cybersecurity? When we talk about the “attack […]