How to Use ScanSearch to Find Exposed Services and Vulnerabilities on Your Network

·1 views

ScanSearch is an internet-wide search engine that indexes public-facing network devices, servers, and services, functioning similarly to Google but for connected infrastructure. Security and operations teams can use it to identify unintentionally exposed services, outdated software versions, and known vulnerabilities linked to their public IP ranges or domains. The tool supports a structured query syntax, allowing users to filter results by IP range, product name, version, and even associated CVEs. Unlike traditional internal port scanners, ScanSearch provides an external perspective on an organization's attack surface by continuously indexing internet-facing devices. This makes it a practical resource for prioritizing patching efforts and maintaining overall security hygiene.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Logistic Regression: How Machine Learning Predicts Binary Outcomes Like Engine Failure

Logistic Regression is a machine learning technique used to answer binary classification questions — such as whether an engine will fail — unlike Linear Regression, which predicts continuous numeric values. A key limitation of applying linear regression to binary outcomes is that predictions can fall outside the valid 0–1 probability range, which Logistic Regression resolves using the Sigmoid function to constrain outputs between 0% and 100%. The model converts the resulting probability into a final classification using a decision threshold, defaulting to 0.5, though this can be lowered in high-stakes scenarios to trigger earlier warnings. In engine diagnostics, multiple sensor inputs — such as temperature, oil pressure, and vibration — are each assigned a weight, combined linearly, and passed through the Sigmoid curve to produce a unified failure probability. Python's scikit-learn library can be used to train such a model on telemetry data and generate real-time failure risk estimates from live sensor readings.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

DP-750 Exam Prep: Key Delta Lake and Spark Table Operations You Must Know

Microsoft's DP-750 Azure Databricks Data Engineer Associate exam frequently tests candidates on fundamental Delta Lake and Spark table operations rather than advanced optimizations. Core topics include INSERT INTO, which appends rows without deleting existing data, and INSERT OVERWRITE, which replaces existing table data entirely. Commands like CREATE TABLE AS SELECT and CREATE OR REPLACE TABLE AS SELECT are also common exam traps, each serving distinct purposes around table creation and replacement. Delta Lake table constraints such as NOT NULL and CHECK are tested for their role in enforcing data quality rules at the table level. PySpark methods like dropna and fillna are similarly assessed, with the exam distinguishing between removing null rows versus replacing null values.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Cloud-Native vs Traditional Architecture: What Actually Matters at Scale

Cloud-native architecture is defined by containerization, dynamic orchestration, statelessness, and API-driven infrastructure — not merely by running on a cloud provider like AWS. Traditional architecture, by contrast, relies on fixed provisioned servers with long-lived processes and manually managed capacity scaling. Each approach carries distinct trade-offs: traditional systems offer operational simplicity, cost predictability, and easier stateful patterns, while cloud-native systems are built for horizontal scaling and ephemeral, loosely coupled services. A key point raised is that many 'should we go cloud-native' debates conflate two separate questions — where infrastructure runs versus how the application is architected. The Cloud Native Computing Foundation defines cloud-native around containers, microservices, immutable infrastructure, and declarative APIs as core enabling patterns.

0 comments Read more at DEV Community

ProgrammingHacker News ·

Saudi-Led Group Completes $55 Billion Acquisition of EA

A Saudi-led investment group has completed a $55 billion purchase of Electronic Arts (EA), one of the world's largest video game publishers. The deal marks one of the biggest acquisitions in gaming industry history. The transaction reflects growing Saudi interest in the global gaming and entertainment sector. Further details about the acquiring group's composition and strategic plans for EA were not available from the provided source.

0 comments Read more at Hacker News