24,000 EXPOSED SERVERS LEAK PASSWORD HASHES VIA 20-YEAR-OLD BMC FLAW

Over 24,000 internet-exposed servers are leaking authentication password hashes through a two-decade-old vulnerability in their Baseboard Management Controller (BMC) interfaces. The flaw allows attackers to extract credentials remotely without authentication.