project
Shodan is a search engine that indexes internet-connected devices and services, letting researchers find exposed systems by location, software, or port.
Kiteworks has told customers to shut down servers over a possible attack, and Heise reports a six-hour worldwide window starting Saturday. Its 9.5.1 update fixes only known flaws, so self-hosted operators are weighing downtime against a threat the company has not described.
Reality
CISA's exploited-vulnerability catalog now holds entries for LiteLLM, Kestra and Starlette, according to a dev.to writeup, and the quickstart docs for those tools still keep provider API keys in the process environment an attacker reads first.
Reality
Hunt.io crawled the operator's own open directory and found the campaign output: 250 SonicWall SMA1000 appliances scanned, 168 leaking LDAP credentials, five Active Directory databases replicated in full.
Reality
Wiz's count of exploited Gogs instances rests on one attacker's habit of leaving its randomly named repositories in place, which makes 700 of 1,500 a floor for a single campaign rather than a measure of who is exposed.
Reality
CISA says attackers reached programmable logic controllers over the internet during July 2026, changed IP addresses and passwords, and left some utilities unable to monitor their own equipment. No actor has been named.
Reality
The patch for the last Gogs RCE validated the path parameter and never looked at where a committed symlink pointed. Wiz counted more than 700 already-compromised instances before v0.13.4 shipped.
Reality
July's intrusions into US water utilities did not need an exploit. They needed a PLC on a cellular modem with nothing in front of it, and CISA's August 21 guidance is an inventory job.
Reality
Hunt.io says over 14,530 cameras fell to three parallel vectors. Two are the operator's problem. The third, the vendor's own P2P relay, opens on a serial number alone.
Reality