An update to this - the scan is still running, but it looks like I'm going to end up with 8 times more vulnerable hosts than 
@shadowserverThe Shadowserver Foundation are seeing.
I'll update tomorrow and likely publish the full data - a shocking amount of orgs haven't patched. E.g. there's hundreds of .gov* SSL cert names unpatched.
If anybody from the NSA follows me, you might want to patch:
103.41.70.207,vdicorp.nsa.gov,13.1-55.34,VULNERABLE
There's a bunch of DOGE'd departments which haven't updated Netscaler this year.
If you have a fediverse account, you can quote this note from your own instance. Search https://cyberplace.social/users/GossiTheDog/statuses/114791029463176976 on your instance and quote it. (Note that quoting is not supported in Mastodon.)
