Censys

Censys is the authority in Internet intelligence & insights. Delivering the most comprehensive, accurate, and up-to-date global map of Internet infrastructure.

[Censys @censysio]

"AI makes the best decisions with the data available to it, but if you don't have data on yourself, on your adversaries, on the rest of the picture, you're not going to end up with the right conclusions. We’ll just make bad decisions faster."

-Censys CEO and Founder, Zakir Durumeric

https://t.co/ZYsL8dhkq0

[Censys @censysio]

🚨 CVE-2026-55040 + CVE-2026-63520 can be chained to bypass authentication and achieve RCE on Microsoft SharePoint Server.

Censys sees 329,000 Internet-facing servers.

Read the advisory: https://t.co/w7WfofCvAh #CVE202655040 #CVE202663520

[Censys @censysio]

ERMAC and HookBot are tracked as two families. Censys ARC researcher @thehappydinoa read the leaked source and found one code base, where a single constant decides which name the panel shows.

Also in the post: which detection artifacts survive a rebrand, and which do not. https://t.co/IU036Ls22f #CensysARC

[Censys @censysio]

A cyberattack took a UK power generator offline for four days.

While details of the attack are still emerging, the incident puts a familiar critical infrastructure challenge back in focus: "you can’t protect what you can’t see."

For energy and utility operators, that means understanding what systems, remote access pathways, and control surfaces are exposed to the public Internet.

Read the latest reporting from @IntelligentCISO https://t.co/k0ixYu1EHB

Learn how Censys helps energy and utility organizations identify and reduce Internet exposure: https://t.co/zxtAkUiy8Z

[Censys @censysio]

What skill has proven most valuable in your day-to-day cybersecurity work?

Could be networking, Linux, scripting, threat analysis, incident response, common sense 😉 or something else entirely.

[Censys @censysio]

Censys ARC’s @ex_raritas spotted a fake Zoom launcher while hunting in the Censys platform for malware. Following the chain led to infrastructure designed to replace Ledger and Trezor apps with repacked versions that steal crypto recovery phrases.

He walks through the investigation and shares the Censys query that surfaced it.

[Andrew Northern 𓅓 @ex_raritas]

Found a fake Zoom launcher today that lead to a crypto hardware wallet stealer...plus some other really weird stuff while searching in the @censys.io data set. https://t.co/FZTxbqfpAL

[Andrew Northern 𓅓 @ex_raritas]

Found a fake Zoom launcher today that lead to a crypto hardware wallet stealer...plus some other really weird stuff while searching in the @censys.io data set. https://t.co/FZTxbqfpAL

[Censys @censysio]

"Very useful for OSINT investigations with IP's, hashes and potential malicious entities"

Read the full review here: https://t.co/HZdD2Pas1f

[Censys @censysio]

Censys ARC researcher @ex_raritas breaks down a phishing campaign spoofing fake OSHA | US Department of Labor violation notices that he surfaced through proactive threat hunting with the Censys platform.

[Andrew Northern 𓅓 @ex_raritas]

Hunting for more malware on the web today and found this OSHA themed lure... check it out. https://t.co/Tt6pmZRdix

[Censys @censysio]

The data your threat hunters swear by, now available to every analyst in the SOC. https://t.co/v2tGb49Wvl

[Andrew Northern 𓅓 @ex_raritas]

Idk what this is or how old it is... happy hunting!

Check it out yourself on @censysio .

[Censys @censysio]

Nearly 10 years after Mirai, we're still talking about vulnerable IoT devices exposed to the Internet.

@schwartzonsec weighs in during the latest Censys ARC Flash.

Watch Episode 4: https://t.co/TSkXofWpu4

Read the research:
https://t.co/AF6SJwAqu1 #CensysARC

[Censys @censysio]

Critical infrastructure security specialist @SecEvangelism published a walkthrough of how to use Censys and OSINT to map an interconnected network of 130+ fake websites, fraudulent ship registries, forged seafarer certifications, and shell companies. https://t.co/Rjprti4mOb

[Censys @censysio]

Catch every episode of Censys ARC Flash on Spotify and stay up to date with the latest research, emerging threats, and Internet intelligence from the Censys ARC team.

🎧 Follow us on Spotify: https://t.co/xKGQ7agnYx #CensysARC

[Censys @censysio]

What can you surface while threat hunting in Censys?

Censys ARC’s @ex_raritas went digging into recent errTraffic v4 activity with fellow researchers and followed the infrastructure as the C2 rotated.

The thread gets tactical: live observations, durable hunting signals, IOCs, plus Censys queries you can run yourself.

[Andrew Northern 𓅓 @ex_raritas]

I had the pleasure of digging into some errTraffic v4 activity with @thehappydinoa and @SeraphimDomain this week in the @censysio dataset.

Here is a quick update on what we found.

🧵👇👇👇

#CENSYSARC #ThreatIntel #IOCs #errTraffic #etherhiding #webinjects

[Censys @censysio]

Censys intelligence is now powering @getBlinkOps AI agents and response workflows to give them the Internet visibility to investigate exposures and drive remediation end-to-end.

Attacker-accurate data. Agentic action. With full external context.[https://t.co/LcuXGjKXZW

[Censys @censysio]

𝗧𝗛𝗘 𝗜𝗡𝗧𝗘𝗟 𝗔𝗨𝗧𝗛𝗢𝗥𝗜𝗧𝗬 | AUGUST 2026

Inside this month:
🔶 New Censys ARC research tracking how leaked DarkSword offensive tooling spread across the Internet
🔶 An exposure assessment following CISA's warning about PLC targeting in the water sector
🔶 53 new fingerprints & 24 new protocol scanners
🔶 Upcoming threat hunting, ARC Flash, and industry events

Read the August edition and subscribe to get the next issue. https://t.co/wcg4zcyrYk

[Censys @censysio]

RT @ex_raritas: Over the past few months, I’ve had the pleasure of working on something truly special alongside an incredible group of peop…

[Censys @censysio]

Missed @silascutler at @BSidesLV last week?

Catch the @iamthecavalry talk on demand and hear what he and Paul Roberts had to say about Operation Graceful: https://t.co/x0y8wSK4ag

@joshcorman
#BSidesLV #CensysARC

[Cybernews @Cybernews]

Security researchers are warning of rapidly regenerating DDoS infrastructure. Following the disruption of the largest botnets the world has ever seen, Kimwolf and Aisuru, dozens of other botnets have spawned, competing for the same pool of vulnerable devices.

Read more: https://t.co/ARwxLWMlgP

[Censys @censysio]

Black Hat 2026 is a wrap.

The conversations on the floor confirmed security teams need better Internet intelligence.

If you missed seeing the Censys platform in action, reach out for a demo.

And stay tuned for the 2026 State of the Internet Report this fall. https://t.co/LmcLUUQ1cT #BHUSA