Google Data Shows Fewer Zero Days in 2024, But More Targeting of Enterprises
Google data reveals 2024 zero-day trends: 75 vulnerabilities found, with 44% targeting enterprise security and networking products. Learn which vendors are most at risk.
Topic
Vulnerabilities
12 posts
Introducing the Ports & Protocols Dashboard: A New Dimension of Exposure Intelligence
**Discover exposed ports & protocols with Censys ASM's new dashboard. Gain real-time attack surface visibility across all 65K+ ports to find hidden risks and misconfigurations fast.**
Postcards From the Edge: Verizon DBIR Reveals Sharp Increase in Targeting of Edge Security Devices
Edge device vulnerabilities surged in 2024, driving a 34% increase in breach exploitation. Verizon DBIR reveals growing attack surface management challenges for defenders.
Now You CVE, Now You Don't: How the MITRE CVE Program Nearly Went Dark
CISA extends MITRE's CVE program contract after funding scare. Learn how the near-lapse exposed fragilities in the vulnerability management system the security industry depends on.
Unlock Total Visibility: How Attack Surface Management & Vulnerability Management Tools Work Together
Discover how Attack Surface Management (ASM) strengthens vulnerability management by eliminating blind spots, uncovering unknown assets, and improving cybersecurity defense.
Fortifying the Chain: Gaining Visibility into Third-Party Risk
Discover how Attack Surface Management helps identify third-party vulnerabilities before attackers do. Learn key strategies to secure your supply chain with Censys Search.
GoAnywhere MFT vulnerabilities are Going Nowhere for Now
Critical GoAnywhere MFT auth bypass (CVE-2024-0204) PoC released. Censys finds ~170 exposed admin interfaces at risk. Learn the vulnerability details and how to patch now.
Managed File Transfer (MFT) Exposure
Attackers Targeting MFT Tools Are On The Rise There is a constant war of convenience vs security being waged and moving files across networks is one of those battles being fought right now. While many of these tools are designed to only be accessed behind a firewall, they are often incorrectly configured to be accessed […]
‘Tis the Season: ???? A Look Back at the Critical Log4j Vulnerability
It’s been just over a year since the infamous log4j vulnerability was publicly disclosed, sending security teams into a patching frenzy as holidays loomed ahead. The vulnerability, dubbed Log4Shell, is a critical remote code execution (RCE) vulnerability in the Apache log4j logging library. It allows a threat actor to send a request with a […]
Pulse Connect Secure: A View from the Internet
Pulse Connect Secure is a low-cost and widely-deployed SSL VPN solution for remote and mobile users. Over the years, researchers have found several significant vulnerabilities in the server software, some even resulting in the active exploitation of critical infrastructure by malicious threat actors. In April of 2021, CISA released a report detailing some of […]
Understanding the impact of OMIGOD (CVE-2021-38647)
Cloud security company wiz.io recently announced a series of vulnerabilities related to a component that is installed automatically on many Azure Linux virtual machines: The Microsoft Open Management Infrastructure (OMI) agent. One of these vulnerabilities is critical in nature, having a 9.6 CVSS score. The root cause of the vulnerability is a missing check […]
Around 9700 Microsoft Exchange Servers Affected by Privilege Escalation Vulnerability
A new CVE was reported (CVE-2019-1136) that allows for an attacker to access email mailboxes of any user, if exploited. Now, no known exploits for this exist yet, but any vulnerability that allows for privilege escalation attacks warrants the attention of IT and security teams. Microsoft posted about this vulnerability recently and they had this […]