GreyNoise

1,700 Ivanti VPN devices compromised. Are yours among them?

January 16, 2024

Over 1,700 Ivanti Connect Secure VPN devices worldwide have been compromised by attackers exploiting two zero-days with no patches currently available. “Additional …

Attackers are trying to exploit Apache Struts vulnerability (CVE-2023-50164)

December 14, 2023

Attackers are trying to leverage public proof-of-exploit (PoC) exploit code for CVE-2023-50164, the recently patched path traversal vulnerability in Apache Struts 2. …

Critical ownCloud flaw under attack (CVE-2023-49103)

November 28, 2023

Attackers are trying to exploit a critical information disclosure vulnerability (CVE-2023-49103) in ownCloud, a popular file sharing and collaboration platform used in …

Atlassian Confluence data-wiping vulnerability exploited

November 6, 2023

Threat actors are trying to exploit CVE-2023-22518, a critical Atlassian Confluence flaw that allows unauthenticated attackers to reset vulnerable instances’ database, …

Critical Atlassian Confluence vulnerability exploited by state-backed threat actor

October 11, 2023

A critical flaw in Atlassian Confluence Data Center and Server (CVE-2023-22515) has been exploited by a state-backed threat actor, Microsoft’s threat analysts have …

11 search engines for cybersecurity research you can use right now

August 29, 2023

Staying ahead in cybersecurity requires constant learning and adaptation. If you’re interested in cybersecurity research, explore the resources outlined below. …

Citrix ADC zero-day exploitation: CISA releases details about attack on CI organization (CVE-2023-3519)

July 21, 2023

The exploitation of the Citrix NetScaler ADC zero-day vulnerability (CVE-2023-3519) was first spotted by a critical infrastructure organization, who reported it to the …

VMware Aria Operations for Networks vulnerability exploited in the wild (CVE-2023-20887)

June 21, 2023

CVE-2023-20887, a pre-authentication command injection vulnerability in VMware Aria Operations for Networks (formerly vRealize Network Insight), has been spotted being …

ThreatBlockr integrates with GreyNoise to guard against false positives

May 9, 2023

ThreatBlockr and GreyNoise announced a partnership that will enhance the ThreatBlockr platform. By leveraging GreyNoise data, ThreatBlockr customers now have automatic access …

Ransomware gangs are exploiting IBM Aspera Faspex RCE flaw (CVE-2022-47986)

March 30, 2023

Attackers are exploiting a critical vulnerability (CVE-2022-47986) in the IBM Aspera Faspex centralized file transfer solution to breach organizations. About CVE-2022-47986 …

PoC exploit, IoCs for Fortinet FortiNAC RCE released (CVE-2022-39952)

February 21, 2023

Horizon3.ai’s Attack Team has released a PoC exploit for CVE-2022-39952, a critical vulnerability affecting FortiNAC, Fortinet’s network access control solution. …

PoC for critical ManageEngine bug to be released, so get patching! (CVE-2022-47966)

January 17, 2023

If your enterprise is running ManageEngine products that were affected by CVE-2022-47966, check now whether they’ve been updated to a non-vulnerable version because …