Find notable cyber news and cases, enriched with sources, timelines, and signals.

Broad exposure of admin panels, databases, and legacy services across organizations

Trend
First reported
Last updated
Happening score
H score 18
1 unique sources, 1 articles

Summary

Hide ▲

Broad exposure of HTTP panels, databases, and legacy services is expanding organizations' internet-facing attack surface, increasing brute-force and initial-access risk. In a 2026 measurement of 3,000 attack surfaces, 60% of organizations had at least one exposed panel, 49% had a risky port or service, and 42% had a database reachable from the internet. Public files and information were also common at 30%, showing that many reachable assets should not be public at all.

Related Happenings

Widespread exposure and misconfiguration in self-hosted AI infrastructure

Trend
H score19 First: 05.05.2026 13:30 Last: 05.05.2026 13:30 Sources 1

About this happening: A large-scale measurement found **self-hosted AI infrastructure** was being deployed with **widespread exposure and no authentication**, creating a broad risk of data theft, workf...

Timeline

  1. 17.06.2026 13:30 2 articles · 2h ago

    Intruder measures widespread exposure of admin panels, databases, and public files

    Initial Disclosure

    Intruder's 2026 Attack Surface Management Index analyzed 3,000 attack surfaces and found that publicly reachable services remain common across organizations: 60% had at least one exposed HTTP panel, 49% had a risky port or service, 42% had a database reachable directly from the internet, and 30% had files or information publicly accessible that should not be public. The findings also show MySQL Database Exposed at 26%, Postgres Database Exposed at 16%, API Documentation Exposed at 15%, and WordPress Admin Panel Exposed at 15%, highlighting how internet-facing admin tools, databases, and legacy services expand attack paths.

    Show sources