Censys report shows rapid growth in exposed AI software while other systems lag
Censys observed a 63% increase in AI-related software exposed to the public internet between October 2025 and July 2026, reaching 267,915 IP addresses. By contrast, exposed industrial control systems grew only about 4% over two and a half years, and the oldest versions of several business products remained largely unchanged. The report also notes that many exposed ICS hosts sit on consumer or mobile networks, making owners difficult to identify.
Censys recorded a 63% rise in publicly reachable AI software, from 164,088 addresses in October 2025 to 267,915 by July 2026. The expansion covered 44 products. n8n alone accounted for 113,926 hosts; among those reporting versions, 76.1% ran a version covered by at least one flaw rated 9.0 or above, and these systems hold service credentials.
OpenClaw illustrates the speed: its first control-panel release appeared January 5, 2026; six days later two panels were exposed, and by April 7 there were 85,478. Meanwhile, oldest versions of Telerik Report Server, Jenkins, Cleo MFT, and SharePoint barely shifted share from January 2024 to May 2026.
The rapid exposure of AI workflow and agent software could widen opportunities for credential theft and service compromise, affecting businesses and their customers. Because many industrial control hosts sit on consumer or mobile networks, operators may be hard to identify and notify, potentially slowing incident response. Uneven upgrade habits may leave older business systems at risk, while attackers could pivot through ordinary IT services without deep industrial protocol knowledge.