The Shadowserver Foundation @Shadowserver
Our mission is to make the Internet more secure by bringing to light vulnerabilities, malicious activity and emerging threats. Join our Alliance! shadowserver.org/partner Global Joined March 2009-
Tweets2K
-
Followers22K
-
Following0
-
Likes328
For MikroTik with SSH enabled, check out our Accessible SSH reporting (shadowserver.org/what-we-do/net…), with the tag 'mikrotik' dashboard.shadowserver.org/statistics/com… - just over 119K seen daily currently Background: cert.pl/en/posts/2026/…
These should not be publicly accessible on the Internet due to potential vulnerabilities, such as the recent CVE-2026-67277 nvd.nist.gov/vuln/detail/cv… You can find all our MikroTik detections in Device ID report shadowserver.org/what-we-do/net… (around 3M daily): dashboard.shadowserver.org/statistics/iot…
We have started reporting out (daily) MikroTik instances with exposed proprietary services, such as WinBox & Bandwidth Test server (btest): shadowserver.org/what-we-do/net… Around 2.6M exposed instances shared daily. Top: Brazil, Indonesia, USA. Tree map stats: dashboard.shadowserver.org/statistics/com…
IP data in Vulnerable HTTP reporting tagged 'cve-2026-86218': shadowserver.org/what-we-do/net… 218 out of 1399 seen in total. This is one week after exploitation activity was first reported publicly. Patch info: documentation.n-able.com/N-central/Rele… Background on incidents: huntress.com/blog/n-able-vu…
Still 218 instances of N-able N-central seen unpatched to CVE-2026-86218 pre-auth RCE that is exploited in the wild & on @CISACyber KEV. Top: US (141) Stats - World Map view: dashboard.shadowserver.org/statistics/com… Tracker: dashboard.shadowserver.org/statistics/com…
Compromised Website Report: shadowserver.org/what-we-do/net… Thank you to @GreyNoiseIO for the share! Background with info about the AI-orchestrated campaign behind the compromises (includes IOCs): greynoise.io/blog/ai-orches…
We shared a one-off share of over 400 compromised PaperCut NG/MF instances (via CVE-2026-81578/CVE-2026-82078) observed by @GreyNoiseIO. IP data in our Compromised Website reporting for 2026-09-11, tagged 'papercut-compromise'. Dashboard Tree Map stats: dashboard.shadowserver.org/statistics/com…
@onyphe @BleepinComputer Yes, looks like we undercounted due to a bug - we already shared out more complete results for the day and will have full results going forwards which will be similar to the numbers you mentioned
Running an outdated Plex Media Server? Patch! Dashboard Tree Map view: dashboard.shadowserver.org/statistics/com…
No CVEs have been issued meaning the vulnerabilities are essentially invisible to the security community limiting an effective response. We tag the raw IP data shared 'vulnerable-plex' in Vulnerable HTTP reporting: shadowserver.org/what-we-do/net… Tracker: dashboard.shadowserver.org/statistics/com…
Since 2026-09-04 we are scanning/reporting daily unpatched versions of Plex Media Server in response to an advisory issued by Plex forums.plex.tv/t/important-se… for v1.43.2 & earlier. Over 36K instances found still unpatched! Top affected: US (16K) World Map: dashboard.shadowserver.org/statistics/com…
Exploitation is reported in the wild. Review for compromise and patch!
At least 122,500 MikroTik devices with SSH accessible found per 24 hour scan window on 2026-09-05 (no vulnerability check). IP data shared daily in Accessible SSH reporting shadowserver.org/what-we-do/net… tagged 'mikrotik' & Device Identification reports: shadowserver.org/what-we-do/net…
We added MikroTik SSH identification to our daily scans on 2026-09-04, in response to MikroTik's patches mikrotik.com/supportsec/sep…. As discovered by @CERT_Polska_en cert.pl/en/posts/2026/… unpatched MikroTiks can be compromised, if device supports remote access using SSH protocol
Make sure to install Emergency Patch (Release 3) - but assume compromise. Background on PaperCut incidents: huntress.com/blog/papercut-… Detection based on Nuclei template by darses - github.com/projectdiscove… #CyberCivilDefense
Daily IP data now in our Vulnerable HTTP reporting, tagged 'cve-2026-82078' & 'cve-2026-81578': shadowserver.org/what-we-do/net… Tree map view: dashboard.shadowserver.org/statistics/com… NVD entry: nvd.nist.gov/vuln/detail/cv… nvd.nist.gov/vuln/detail/cv… Patch info: papercut.com/kb/Main/securi…
PaperCut MF/NG incidents: At least 204 instances found on 2026-08-31 still vulnerable to CVE-2026-82078/CVE-2026-81578 RCE that is exploited in the wild. Make sure to check for compromise & patch. Top affected: US (60). Dashboard World Map view stats: dashboard.shadowserver.org/statistics/com…
Make sure to install Emergency Patch (Release 2) - but assume compromise. Detection based on Nuclei template by darses - github.com/projectdiscove… Background on PaperCut incidents: huntress.com/blog/papercut-…
Daily IP data now in our Vulnerable HTTP reporting, tagged 'cve-2026-82078' & 'cve-2026-81578': shadowserver.org/what-we-do/net… Tree map view: dashboard.shadowserver.org/statistics/com… NVD entry: nvd.nist.gov/vuln/detail/cv… nvd.nist.gov/vuln/detail/cv… Patch info: papercut.com/kb/Main/securi…
Dashboard World Map view stats: dashboard.shadowserver.org/statistics/com… Dashboard Tree Map stats: dashboard.shadowserver.org/statistics/com… NVD entry: nvd.nist.gov/vuln/detail/cv… MS advisory: msrc.microsoft.com/update-guide/v… Daily IP data tagged 'cve-2026-62911' See also @ncsc_nl advisory: ncsc.nl/alerts/ernstig…
We are scanning & reporting daily on vulnerable Microsoft Exchange CVE-2026-62911 (Authentication Bypass by Capture-replay) instances in our Vulnerable Exchange reporting: shadowserver.org/what-we-do/net… At least 21899 IPs seen unpatched 2026-08-31, top US (6.2K) & Germany (5.1K)
Florian Roth ⚡️ @cyb3rops
225K Followers 3K Following Head of Research @nextronsystems #DFIR #YARA #Sigma | detection engineer | creator of @thor_scanner, Aurora, Sigma, LOKI, YARA-Forge | always busy ⌚️🐇 | vi/vim
mRr3b00t @UK_Daniel_Card
126K Followers 8K Following Chief Artificial Intelligence Cyber Security Scientist Superintelligence-grade security former Helpdesk AI infection status: clean Task Force 29
Justin Elze @HackingLZ
74K Followers 5K Following CTO @TrustedSec | Former Optiv/SecureWorks/Accuvant Labs/Redspin | Race cars
Will @BushidoToken
39K Followers 3K Following Senior Threat Intel Advisor @TeamCymru Co-founder @CuratedIntel Co-author @SANSForensics FOR589 Co-founder @BSidesBournemth #126: REvil @darknetdiaries
Andrew Thompson @ImposeCost
42K Followers 2K Following SVP of Adversary Operations @GreyNoiseIO. Former @USMC and @Mandiant. There's no finish line in security.
Katie Nickels @likethecoins
55K Followers 3K Following Director of Intel at @redcanary. SANS Certified Instructor for FOR578: CTI. Senior Fellow at @CyberStatecraft. She/her. Mastodon: @[email protected]
Virus Bulletin @virusbtn
62K Followers 1K Following Security information portal, testing and certification body. Organisers of the annual Virus Bulletin conference. @[email protected]
Catalin Cimpanu @campuscodi
106K Followers 2K Following Cybersecurity reporter. I'm mostly active on BlueSky and Mastodon.
CyberKnow @Cyberknow20
37K Followers 3K Following Situational Awareness | Threat Intelligence | cybertracker | Hacktivism | Meme Farmer Digital Owl of the Cyber Realm Posts and Opinions are my own
Clandestine @akaclandestine
65K Followers 5K Following | Security | Osint | Threat Research | Opsec | Threat Intelligence | Infosec | Threat Hunting | Humint |
ςεяβεяμs - м�... @c3rb3ru5d3d53c
27K Followers 243 Following 💕 Malware Reverse Engineer & Malware Geneticist 💕 #Binlex Developer https://t.co/EKYUS9Itvd 👩💻 She/Her
Gi7w0rm @Gi7w0rm
19K Followers 821 Following Threat Intelligence Analyst | Projects: https://t.co/azRpNg9NJQ & https://t.co/SyvUfXpbmI | If I post false intel, contact me! Support me: https://t.co/5WgDqr0K8p 🇪🇺🇩🇪🇺🇦🌈
Microsoft Threat Inte... @MsftSecIntel
197K Followers 994 Following We are Microsoft's global network of security experts. Follow for security research and threat intelligence.
Matt Zorich @reprise_99
16K Followers 2K Following @Microsoft Security | https://t.co/HWozKuixTi | Tweets are my own | 🇦🇺
Alexandre Dulaunoy @a... @adulau
8K Followers 7K Following Enjoy when humans are using machines in unexpected ways. I break stuff and I do stuff. @[email protected]
Nick Carr @ItsReallyNick
39K Followers 3K Following Partner / Threat Intelligence at Microsoft. Previously, Director of Incident Response & Intel Research at Mandiant. Former Chief Technical Analyst at CISA
Dr. Anton Chuvakin @anton_chuvakin
44K Followers 9K Following Information security - #SIEM, #DFIR, #EDR, #AI Now @CiscoSecure Ex @Gartner_Inc Ex @Google
an0n @an0n_r0
14K Followers 734 Following CRT(E|O|L) | OSCP | @RingZer0_CTF 1st (for 2yrs) | HackTheBox Top10 | RPISEC MBE | Flare-On completer | GoogleCTF writeup winner | SSD research | Math MSc |🇭🇺
Koen Van Impe ☕ @cudeso
4K Followers 2K Following Freelancer. CSIRT. Incident Response. Threat Intelligence. Security, IDS, Linux, OpenBSD, Honeypots, Jazz, Literature, Modern Art. https://t.co/D9bkiv10Sy
Iru Threat Intelligen... @iruthreatintel
3 Followers 19 Following @officiallyiru Security Research team's space for sharing intelligence and observations about what we see in the technology and cyber industries.
Elijah @elijahinfosec
1 Followers 146 Following
Vulnerability Man @Vul_Triage_Man
0 Followers 13 Following
pentestunicorn @pentestunicorn
27 Followers 279 Following "never give up - there is always a way", #33c3, #34c3, #36c3
Jay Payan @jay_payan
14 Followers 318 Following
Roei Hadashi @roeihadashi
15 Followers 825 Following I break in for a living — and I'm the one they call after someone else did. Head of Red Team & AI Security @ HackersEye
JUAN PABLO CANALES OM... @jua37363
510 Followers 3K Following Sentido Común, sin militancia de ningun partido político. Derecha. 🇨🇱. Perfil cuenta original:https://t.co/mj5ksOMtRp
Henrik Westman @hjo1620
168 Followers 7K Following
Readnroll @Readnroller
2 Followers 35 Following
Javier Villamor @JavierVillamor
98K Followers 6K Following Analista. Bruselas. UE / OTAN | RT/link/follow ≠ Endorsement. Personal account
Nicholas mwathiki @MwathikiN
371 Followers 686 Following Web3 Dev & Tech Analyst. Daily breakdowns on AI, Crypto & On-Chain trends. Specializing in Solidity & Verifiable AI. Based in 🇰🇪. Let's decode the future.
احمد @Ahmed9Salman
280 Followers 4K Following
KAZU @Account4Kazu
368 Followers 652 Following Towards the safer cyberspace🌏 / CTF🖥️ / Travelling🛫 / Videogames🎮 / Trivia+Puzzles🧩 / Designing🧶 / Opinions are my own🥂
Mauricio Alabuela @CronosTech7
52 Followers 1K Following Apasionado por la Tecnología, Emprendedor Tech.
brayohkheem @brayohkheem
73 Followers 272 Following
Huck Finn @HuckFin19034278
32 Followers 3K Following
Juan Solo @thefirst1z
11 Followers 342 Following
Andrew @andrewchenke
259 Followers 498 Following Enterprise Cybersecurity Consultant, Complex Business Solutions Developer & System Administrator | RT, Likes & Follows ≠ Endorsement, Owner at @ahctsllc
Trilok Dhaked @Tr1l0kDh4k3d
527 Followers 1K Following Security Researcher Founder & CEO: Building @InfoSec_Securit @BugsecAI
GeoSolutions 🇮🇹... @geosolutions_it
6K Followers 329 Following GeoSpatial solutions based on @GeoServerO, @GeoNode, @MapStore2, #GeoNetwork and other Geospatial Open Source projects.
0xArte @0xArte
43 Followers 1K Following
/dev/null @AbsenceDeTout
3K Followers 3K Following Someone else’s computer is not an architecture... AI • Tesla • Cyber Security. https://t.co/zlugjbC6J1 - WIP
d0riane 🦝 @DorianeBrt
87 Followers 228 Following #cybersecurity, #OSINT & #blockchain 🌲🏔️🌈 | Chair & orga of @GrehackConf 👻 | 🦝🚩 @rHACKoon
Adrian Niedzielski @AdrianNiednu
4 Followers 809 Following
Rayan @0xRshell
3 Followers 132 Following Cybersecurity Researcher | Offensive Security | eCPPTv3 • eJPTv2 • eWPTv2 • Sec+
Minion Enjoyer @minionenjoyer12
1 Followers 42 Following
S K @4rfxeuLyB7tH
2 Followers 32 Following
Tomasz @Tomasz_Gar
1 Followers 115 Following
Johny.M @Johny_M_007
12 Followers 523 Following “Every deep thinker is more afraid of being understood than of being misunderstood.” ― Friedrich Nietzsche
Pierre LΞMΛSSON @sirchamallow
12K Followers 3K Following ✨ dev web & Tech. support. 💻 Passionné de veille et de technologie.
Christian @ChristianRadi73
144 Followers 473 Following irgendwo bei 48 Grad Nord Zuhause. Politik, Wohlstand aufbauen am Anfang, Orthodox, Beruflich irgendwas mit Handwerk
lol one @lolone1k
1 Followers 131 Following
ABDULMALIK. @z7bbb
0 Followers 93 Following
jorgelcastillou @jorgelc11416846
5 Followers 149 Following
snuffleupagus @scott_none
50 Followers 612 FollowingTrends for United States
You might like
