Forescout found post-quantum-capable SSH on 6% of IoMT and 16% of medical OT devices in a 2.5 million-device study of over 50 healthcare organizations. With long device lifecycles and few upgrade paths, hospitals are left planning around segmentation.
Reality
- Evidence60
- Adoption10
- Hype gap+20
- Incentives
- Not scored
- Confidence58
buildOne report1 publisher A honeypot that resolves ${SERVER_IP} across connections recovered 14 of 15 real C2 URLs
A Go decoy on port 22 logged 3,888 login attempts from 666 addresses in 22 hours, and the part worth copying is the resolver that turns a loader's URL template into an address you can actually block.
Reality
- Evidence38
- Adoption10
- Hype gap+14
- Incentives40
- Confidence45
Rapid7 scan engines now ask credentialed hosts for their own listening port list
On hosts where a credential already matches, the engine reads the listening ports from the operating system instead of inferring them, trading probe timeouts for findings on ports the network blocks it from reaching.
Reality
- Evidence58
- Adoption15
- Hype gap+12
- Incentives82
- Confidence55
buildOne report1 publisher Two chained RouterOS flaws hand admin to an attacker who knows a username and a modulus
CERT Polska reports active exploitation on internet-facing MikroTik routers, where the chain needs no private key and no user interaction, and the fixed builds close the bypass without explaining how attackers learned the account details.
Reality
- Evidence60
- Adoption42
- Hype gap+8
- Incentives28
- Confidence54
buildOne report1 publisher Sizing a session broker in open sessions lands a 200-person org on a 512 MB VM
A proxied session costs about 320 KB of buffers and goroutine stacks, so peak load for a mid-size engineering organisation is tens of megabytes, and the constraint that actually bites is the controller's network interface.
Reality
- Evidence46
- Adoption
- Not scored
- Hype gap−12
- Incentives66
- Confidence54