Kibana at 161,686 observed hosts: exposure of the interface that can read everything underneath it
Kibana at 161,686 observed hosts: exposure of the interface that can read everything underneath it Kibana is the browser layer over Elasticsearch. I…
DevOps
⚑ Report a ProblemLatest DevOps news from Tech News
How much of the public internet runs on Caddy? A ZoomEye measurement of 1.7 million assets
How much of the public internet runs on Caddy? A ZoomEye measurement of 1.7 million assets What the number is for Caddy is a web server written in G…
57,029 Harbor Registries Online: An Artefact Store Is a Deployment Authority
57,029 Harbor Registries Online: An Artefact Store Is a Deployment Authority A container registry holds the images that a platform will run. Control…
Collaboration Platforms Under Measurement: 185,584 Confluence and 91,979 Jira Instances
Collaboration Platforms Under Measurement: 185,584 Confluence and 91,979 Jira Instances Collaboration platforms rank high on attacker lists because…
40,059 Keycloak Servers: Where the Identity Provider Is the Asset
40,059 Keycloak Servers: Where the Identity Provider Is the Asset An identity provider is the component that decides who a user is for every applica…
1,577,590 F5 BIG-IP Matches: Sizing the Management Plane After Two KEV Entries
1,577,590 F5 BIG-IP Matches: Sizing the Management Plane After Two KEV Entries When CISA added F5 BIG-IP APM CVE-2026-94127 to the Known Exploited V…
An LLM observability platform stores prompts, and prompts are the application
An LLM observability platform stores prompts, and prompts are the application A title query for Langfuse returns 346 matches in ZoomEye. The number…
6,918 Paperless matches: a document archive that was meant to replace the filing cabinet
6,918 Paperless matches: a document archive that was meant to replace the filing cabinet Paperless-ngx scans paper documents, runs optical character…
SonarQube: 92,810 title matches on the platform that holds your source code and your pipeline tokens
SonarQube: 92,810 title matches on the platform that holds your source code and your pipeline tokens A code-quality platform is an unusual security…
1,160,264 Mosquitto fingerprints: the MQTT broker that ends up on the public internet
Mosquitto is the reference open source MQTT broker, and it is small enough to run almost anywhere. A ZoomEye query for the application fingerprint r…
1,890,595 MongoDB Service Matches: The Default-Configuration Problem at Internet Scale
1,890,595 MongoDB Service Matches: The Default-Configuration Problem at Internet Scale MongoDB has supported authentication for many years, and its…
Verdaccio on 3,336 hosts: private npm registries and the tokens they hand out
Verdaccio on 3,336 hosts: private npm registries and the tokens they hand out Verdaccio is a lightweight private registry for npm packages. Teams ru…
Mattermost: 736,893 Fingerprint Matches on Self-Hosted Collaboration
Mattermost: 736,893 Fingerprint Matches on Self-Hosted Collaboration Mattermost is a self-hosted collaboration platform: channels, direct messages,…
5,102,346 Hosts on Port 5900: VNC and the Legacy Remote-Access Surface
5,102,346 Hosts on Port 5900: VNC and the Legacy Remote-Access Surface VNC predates most of the security assumptions that modern remote access takes…
33,005 Internet-Reachable LiteLLM Gateways: Measuring the AI Gateway Attack Surface After CVE-2026-59822
33,005 Internet-Reachable LiteLLM Gateways: Measuring the AI Gateway Attack Surface After CVE-2026-59822 CVE-2026-59822 is an authentication bypass…
161,764 Assets on Port 102: Sizing the Industrial Control Surface That AA26-231A Described
161,764 Assets on Port 102: Sizing the Industrial Control Surface That AA26-231A Described Joint Cybersecurity Advisory AA26-231A warned in August 2…
1.8 Million Reachable MongoDB Services: Reading Exposure Numbers Without Overreading Them
1.8 Million Reachable MongoDB Services: Reading Exposure Numbers Without Overreading Them A ZoomEye query for service="mongodb" returns 1,868,598 ma…
Finding the Workflow Orchestrators: ZoomEye Exposure Data for Kestra After CVE-2026-49869
Finding the Workflow Orchestrators: ZoomEye Exposure Data for Kestra After CVE-2026-49869 CVE-2026-49869 is an authentication bypass in Kestra OSS t…