SANS ISC Warns of Increased Scanning for Exposed Notebooks
Following the Marimo disclosure, SANS ISC has observed a 400% spike in scanning for ports 8080 and 8888, typically used by data science tools. This suggests that automated exploit scripts are already being deployed at scale to find unpatched instances.
Primary Sourcing Telemetry: Synthesized from SANS ISC under Transformative Fair Use for defensive security awareness.
Explore the Complete Broadsheet Edition
This briefing is part of the 4-page daily intelligence broadsheet published on 2026-04-13.