Using Change and Novelty Filters for Continuous Monitoring
Using Change and Novelty Filters for Continuous Monitoring The timeline gap in this incident is its most instructive detail. Solar detected the intr…
Latest DevOps news from Tech News
Using Change and Novelty Filters for Continuous Monitoring The timeline gap in this incident is its most instructive detail. Solar detected the intr…
Penpot returned a true zero: 3,617 title matches and no fingerprint in any field Zero is a result worth reporting precisely, and it is also easy to…
Apache Airflow on 73,265 observed hosts: the scheduler that holds every connection string A ZoomEye fingerprint query for app="Apache Airflow" ( res…
Collaboration Platforms Under Measurement: 185,584 Confluence and 91,979 Jira Instances Collaboration platforms rank high on attacker lists because…
9,045 internet-reachable Couchbase instances: measuring the document database layer Opening Couchbase is a distributed document database. It has a q…
17,474 MLflow Servers Online: Experiment Tracking as an Exposure Problem A query for the MLflow application fingerprint returned 17,474 records on 2…
1,577,590 F5 BIG-IP Matches: Sizing the Management Plane After Two KEV Entries When CISA added F5 BIG-IP APM CVE-2026-94127 to the Known Exploited V…
An LLM observability platform stores prompts, and prompts are the application A title query for Langfuse returns 346 matches in ZoomEye. The number…
Apache Zeppelin on the Internet: 25,617 Fingerprint Matches and a Notebook With Cluster Credentials Why a notebook server is a high-value service Ze…
6,918 Paperless matches: a document archive that was meant to replace the filing cabinet Paperless-ngx scans paper documents, runs optical character…
Telling Docker Daemons Apart from Other Docker-Facing Services Docker is a name for several things that answer on a network. The CARBONATO advisory…
Why "Zimbra Web Client" Appears Half a Million Times and Almost None of It Is a Mail Server CISA advisory AA26-204A, released 23 July 2026, describe…
Concourse: 3,767 title matches on the pipeline system that executes your build code A continuous integration system runs code that the organisation…
1,890,595 MongoDB Service Matches: The Default-Configuration Problem at Internet Scale MongoDB has supported authentication for many years, and its…
5432 and 1433: two database ports, ten million answers, and the question of what answered The counts Database ports appear at very large scale in in…
Small Numbers, Real Findings: AWX, NiFi, Pulsar and CockroachDB ZoomEye queries on 26 September 2026 returned 6,087 matches for app="Apache NiFi", 5…
Graylog on the Internet: 14,061 Matches on a Platform That Centralises Every Log Log aggregation platforms exist to collect data from every other sy…
2,404,811 answers on port 2181 and 1,381,208 on port 9092: the difference between a coordinator and a broker The counts Two ports associated with di…
Verdaccio on 3,336 hosts: private npm registries and the tokens they hand out Verdaccio is a lightweight private registry for npm packages. Teams ru…
152,655 Matches for ownCloud and the CVE That Matches It Exactly When a product query and a CVE filter return the same number CVE-2023-49105 is an a…
73,105 Airflow instances, 11,673 SonarQube and 33,837 Nexus: fingerprinting the build and quality toolchain The counts Three products that sit in th…
132,158 Observable Magento Stores: Sizing the Population Exposed in the StyleSmuggler Window Opening CVE-2026-75650 (StyleSmuggler) was exploited fr…
5,102,346 Hosts on Port 5900: VNC and the Legacy Remote-Access Surface VNC predates most of the security assumptions that modern remote access takes…
The Virtualization Control Plane Is on the Internet: 414,092 ESXi and 140,746 Proxmox VE Fingerprints A hypervisor is not a workload. It is the laye…
AI Gateways Are Becoming Attack Surface: Measuring Exposed LiteLLM Deployments A new category of infrastructure has quietly joined the list of thing…
90,626 Jupyter Notebooks Are Publicly Indexed: The Difference Between Sharing and Exposing Jupyter notebooks are where analysis happens: data explor…
161,907 Hosts on Port 102 and 173 Siemens S7 Fingerprints: Reading Two Numbers From the Same Internet Two queries run minutes apart against the same…
What Exposure Counts Do Not Prove: A Methodology Note on the Fortinet Credential Advisory On 18 June 2026, the Australian Signals Directorate's Aust…
1659 MQTT, 2503 InfluxDB and 45150 ClickHouse Results: The Data Pipeline Layer Message brokers and time-series databases sit between the sensors and…
NetScaler and the SAML Bypass: Measuring Gateway Exposure with ZoomEye Authentication gateways occupy a structurally difficult position in security…