Tag archive
An external-exposure inventory approach for BeyondTrust Remote Support appliances after CVE-2026-102764 was exploited in an espionage campaign.
A product rename splits a monitoring plane across two titles with different 443 exposure fractions, and neither name carries a fingerprint.
A renamed product splits across two index fields: 31,843 title matches for XenServer, zero app matches for Citrix Hypervisor, and a union that adds 4,802 more.
How to measure internet-visible PAN-OS population without claiming confirmed vulnerable hosts.
Why the FortiManager management plane, not the perimeter VPN, carried the risk in the CL-STA-0954 intrusion.
Why an appliance web stack belongs in the attack-surface review, using the mod_md reverse shell in CL-STA-0954 as the case.
Armory Castle raised Jump Item permissions to Administrator and opened sessions inward. How to inventory what a compromised appliance could reach.
A ZoomEye query for VeloCloud returned 520 matching assets. Here is what that measurement supports for CVE-2026-114625, what it does not prove, and how to turn it into an internal inventory question.
A Anthropic usou Claude para mapear código alcançável e mostrou que segurança também é...
Part 3 of 4 in the series: Wireless and Wired IP Camera Exposure The lens is the part everyone looks...
Consul distributes configuration and service location data across an estate. The ACL system that protects it is optional, and a fingerprint query returns 78,129 matching services.
ZoomEye measurements of exposed AI gateway and workflow orchestrator infrastructure, with a clear account of what the numbers do and do not establish.