The report dives into exposed Industrial Control Systems (ICS) devices around the world and how Water and Wastewater Systems (WWS) can be easily manipulated without authenticationANN ARBOR, Mich., Aug. 7, 2024 /PRNewswire/ -- Today, Censys , who provides the leading Internet Intelligence Platform for Threat Hunting and Attack Surface Management, published the first part of its annual State of the Internet Report focusing on exposed Industrial Control Systems (ICS) in the United States (U.S.) and the United Kingdom (U.K.).MI for a three-pump system with options to view alarms, controls, and system setpointsRecent attacks highlight how critical infrastructure systems can be easily manipulated by threat actors. Since 2023, the security industry witnessed several attacks from the Iranian Revolutionary Guard Corps-affiliated CyberAv3ngers, who defaced Israeli-manufactured Unitronics devices, and Cyber Army of Russia Reborn who overflowed several water tanks in Texas by manipulating Internet-exposed human-machine interfaces (HMIs).Censys' comprehensive internet visibility enabled us to identify significant ICS exposures in the U.S. and U.K., including:More than 40,000 internet-connected ICS devices in the U.S. Excluding known building control protocols, Censys found 18,000 exposed devices that are more likely to control industrial systemsNearly 50% of the HMIs associated with water and wastewater systems (WWS) identified could be manipulated without any authentication requiredApproximately 1,500 control systems were identified in the U.K. as exposed on the public internet, as discovered through scans of 18 automation protocolsIn the U.K., Censys identified roughly 1,700 publicly accessible HTTP devices associated with 26 operational technology (OT) vendors; many likely support default credentials Over 80% of administration interfaces discovered are for building controlsOver half of the hosts that are running low-level automation protocols are concentrated in cellular networks and commercial internet service providers (ISPs), including Verizon and Comcast, making notifications to owners of these devices impossible in many cases"It is imperative that we shed light on the exposure of ICS as they are essential to our critical infrastructure across the globe

The digital community fosters a collaborative environment for security teams to network, share industry knowledge and learn internet scanning best practices. ANN ARBOR, Mich., Aug. 2, 2024 /PRNewswire/ -- Censys, the leading Internet Intelligence Platform for Threat Hunting and Attack Surface Management, today announced the Censys Community Forum, a moderated, online platform for security professionals to discuss topics focused on threat hunting, attack surface management, general security expertise and more. Designed with security professionals in mind, the space provides over 70,000 members with free resources and data-driven security solutions through a centralized, accessible platform. Security practitioners operate in an environment where threats evolve rapidly, and new vulnerabilities are constantly discovered. Censys' centralized repository of current and effective security measures ensures that practitioners can stay ahead of emerging threats and protect their organizations' assets effectively

/PRNewswire/ -- Censys, the leading Internet Intelligence Platform for Threat Hunting and Exposure Management, today announced it secured $75M in new funding....