Tech news from the best sources
When a Query Returns 1,225,564 for an Appliance That Ships in Thousands One result from a recent measurement round deserves more attention than the…
1,868,360 Confluence Against 91,928 Jira: What a Measured Atlassian Estate Tells You About CVE-2026-21589 CVE-2026-21589 affects eight Atlassian Dat…
1,089,053 LDAP Services: Directory Exposure as a Reconnaissance Surface Directory services rarely appear in vulnerability headlines, which makes the…
Sizing CVE-2025-38680 Exposure: What 18.2 Million Linux SSH Hosts Do and Do Not Tell You Vulnerability overview CVE-2025-38680 is a Linux kernel out…
Kibana at 161,686 observed hosts: exposure of the interface that can read everything underneath it Kibana is the browser layer over Elasticsearch. I…
How much of the public internet runs on Caddy? A ZoomEye measurement of 1.7 million assets What the number is for Caddy is a web server written in G…
57,029 Harbor Registries Online: An Artefact Store Is a Deployment Authority A container registry holds the images that a platform will run. Control…
Collaboration Platforms Under Measurement: 185,584 Confluence and 91,979 Jira Instances Collaboration platforms rank high on attacker lists because…
40,059 Keycloak Servers: Where the Identity Provider Is the Asset An identity provider is the component that decides who a user is for every applica…
1,577,590 F5 BIG-IP Matches: Sizing the Management Plane After Two KEV Entries When CISA added F5 BIG-IP APM CVE-2026-94127 to the Known Exploited V…
An LLM observability platform stores prompts, and prompts are the application A title query for Langfuse returns 346 matches in ZoomEye. The number…
6,918 Paperless matches: a document archive that was meant to replace the filing cabinet Paperless-ngx scans paper documents, runs optical character…
SonarQube: 92,810 title matches on the platform that holds your source code and your pipeline tokens A code-quality platform is an unusual security…
Mosquitto is the reference open source MQTT broker, and it is small enough to run almost anywhere. A ZoomEye query for the application fingerprint r…
1,890,595 MongoDB Service Matches: The Default-Configuration Problem at Internet Scale MongoDB has supported authentication for many years, and its…
Verdaccio on 3,336 hosts: private npm registries and the tokens they hand out Verdaccio is a lightweight private registry for npm packages. Teams ru…
Mattermost: 736,893 Fingerprint Matches on Self-Hosted Collaboration Mattermost is a self-hosted collaboration platform: channels, direct messages,…
5,102,346 Hosts on Port 5900: VNC and the Legacy Remote-Access Surface VNC predates most of the security assumptions that modern remote access takes…
How Many MikroTik Devices Are Actually Reachable From the Internet? When CERT Polska disclosed the MikroTrick chain in MikroTik RouterOS on Septembe…
33,005 Internet-Reachable LiteLLM Gateways: Measuring the AI Gateway Attack Surface After CVE-2026-59822 CVE-2026-59822 is an authentication bypass…
161,764 Assets on Port 102: Sizing the Industrial Control Surface That AA26-231A Described Joint Cybersecurity Advisory AA26-231A warned in August 2…
1.8 Million Reachable MongoDB Services: Reading Exposure Numbers Without Overreading Them A ZoomEye query for service="mongodb" returns 1,868,598 ma…
Finding the Workflow Orchestrators: ZoomEye Exposure Data for Kestra After CVE-2026-49869 CVE-2026-49869 is an authentication bypass in Kestra OSS t…