# Latest Security Research

##### The Package That Never Shipped: Following a USPS Smishing Kit Through Censys DNS Data

##### MCP Servers on the Internet

##### Iran-Linked Operators Suspected in ATG Breaches

##### Password Manager Infrastructure in the Wild: Surveying Prevalence, Internet Footprint, and Exposure

##### The cPanel Situation Is…

##### Oluomo: Microsoft OAuth AiTM Phishing Using a Naturalization-Form Lure

##### Rhadamanthys and the Limits of Private Sector Operations

##### FTP Exposure Brief: Examining the 55-Year-Old Protocol Used by Millions

##### Iranian-Affiliated APT Targeting of Rockwell/Allen-Bradley PLCs

##### Hackers Are Attempting to Turn ComfyUI Servers Into a Cryptomining Proxy Botnet

##### Cutting Through the Noise: A Technique-Based Approach to Hunting Web-Delivered Malware

##### [April Fools] BrewJack: Censys Researchers Uncover First Malware Campaign Targeting IP over Avian Carriers

##### [April Fools] Introducing the Censys Host Feelings Score™

##### ICS & Iran, Part 2: Revisiting Exposure of Previously Targeted Devices

##### Under CTRL: Dissecting a Previously Undocumented Russian .Net Access Framework

Censys ARC threat and vulnerability research on adversary infrastructure, malware, exposures, and the trends shaping Internet visibility.