#exposure

2 articles

Researchers took over 4,000 subdomains automatically — starting from 12,500 domains

2026-08-10Security

Silent Push counts roughly three million dangling DNS records worldwide. In one exercise across 12,500 apex domains they isolated 16,000 dangling subdomains and automated the takeover of 4,000 of them. The worst outcome isn't defacement — it's session cookies.

Thirty water systems were disrupted without exploiting a single vulnerability

2026-08-10Security

Attackers changed passwords and IP addresses on controllers that were already reachable from the internet, locking operators out and triggering boil-water notices. Forescout then found 4,407 exposed Rockwell PLCs worldwide — most of them on mobile carrier networks.