Building an Exposure Baseline: A Repeatable ZoomEye Method for Vulnerability Res

<h2> TL;DR </h2> <ul> <li>A Patch Tuesday release is the single monthly batch in which Microsoft publishes security fixes for Windows, Office, Exchange Server and its server

<h1> How much of the public internet runs on Caddy? A ZoomEye measurement of 1.7 million assets </h1> <h2> What the number is for </h2> <p>Caddy is a web server written in Go, and

<h1> From KEV to Exposure: Mapping the September 2026 Batch to Measurable Services </h1> <p>The CISA Known Exploited Vulnerabilities catalog is a list of flaws that have been

<h1> Finding the Exposed Controllers: Using ZoomEye to Locate Internet-Reachable EtherNet/IP Assets </h1> <p>On 30 July 2026, the U.S. Cybersecurity and Infrastructure Security

<h1> 1.8 Million Reachable MongoDB Services: Reading Exposure Numbers Without Overreading Them </h1> <p>A ZoomEye query for <code>service="mongodb"</code> returns 1,868,598

<h1> The AI Gateway Becomes a Target: Measuring LiteLLM and Kestra Exposure </h1> <p>The CISA Known Exploited Vulnerabilities catalog update on September 2, 2026, marked a shift.

<p>I've been writing software professionally since 2011.</p> <p>Java, C#, Kotlin, Node.js. Enterprise backends, microservices, APIs, data pipelines. I've shipped production code