The Internet's Attack Surface Moves at Very Different Speeds
Help Net Security, Thursday, October 15th, 2026
Censys found internet-exposed AI software grew 63% in nine months while exposed ICS and legacy systems barely moved.
Censys counted AI-related software across 44 products on 267,915 internet-exposed IP addresses in July 2026, up 63% from 164,088 nine months earlier.
n8n accounts for 113,926 of those hosts, and 76.1% of versioned n8n servers run a release affected by at least one vulnerability scored 9.0 or higher while storing credentials for connected services.
OpenClaw went from two exposed control panels to 85,478 in three months.
By contrast, exposed industrial control systems grew about 4% in two and a half years, and old versions of Jenkins, Cleo MFT, Telerik and SharePoint barely changed share, suggesting abandoned instances.