GreyNoise

Critical Atlassian Confluence vulnerability exploited by state-backed threat actor

October 11, 2023

A critical flaw in Atlassian Confluence Data Center and Server (CVE-2023-22515) has been exploited by a state-backed threat actor, Microsoft’s threat analysts have …

11 search engines for cybersecurity research you can use right now

August 29, 2023

Staying ahead in cybersecurity requires constant learning and adaptation. If you’re interested in cybersecurity research, explore the resources outlined below. …

Citrix ADC zero-day exploitation: CISA releases details about attack on CI organization (CVE-2023-3519)

July 21, 2023

The exploitation of the Citrix NetScaler ADC zero-day vulnerability (CVE-2023-3519) was first spotted by a critical infrastructure organization, who reported it to the …

VMware Aria Operations for Networks vulnerability exploited in the wild (CVE-2023-20887)

June 21, 2023

CVE-2023-20887, a pre-authentication command injection vulnerability in VMware Aria Operations for Networks (formerly vRealize Network Insight), has been spotted being …

ThreatBlockr integrates with GreyNoise to guard against false positives

May 9, 2023

ThreatBlockr and GreyNoise announced a partnership that will enhance the ThreatBlockr platform. By leveraging GreyNoise data, ThreatBlockr customers now have automatic access …

Ransomware gangs are exploiting IBM Aspera Faspex RCE flaw (CVE-2022-47986)

March 30, 2023

Attackers are exploiting a critical vulnerability (CVE-2022-47986) in the IBM Aspera Faspex centralized file transfer solution to breach organizations. About CVE-2022-47986 …

PoC exploit, IoCs for Fortinet FortiNAC RCE released (CVE-2022-39952)

February 21, 2023

Horizon3.ai’s Attack Team has released a PoC exploit for CVE-2022-39952, a critical vulnerability affecting FortiNAC, Fortinet’s network access control solution. …

PoC for critical ManageEngine bug to be released, so get patching! (CVE-2022-47966)

January 17, 2023

If your enterprise is running ManageEngine products that were affected by CVE-2022-47966, check now whether they’ve been updated to a non-vulnerable version because …

Attackers never let a critical vulnerability go to waste

January 2, 2023

GreyNoise Intelligence unveiled its research report that dives deep into the most significant threat detection events of the past 12 months. “When it comes to cybersecurity, …

Researchers release PoC for Fortinet firewall flaw, exploitation attempts mount

October 14, 2022

Horizon3.ai researchers have released a PoC exploit for CVE-2022-40684, the authentication bypass vulnerability affecting Fortinet‘s firewalls and secure web gateways, …

Auth bypass bug in FortiOS, FortiProxy is exploited in the wild (CVE-2022-40684)

October 11, 2022

After privately warning customers last week that they need to patch or mitigate CVE-2022-40684, a critical vulnerability affecting FortiOS, FortiProxy, and FortiSwitchManager, …

Critical ManageEngine RCE flaw is being exploited (CVE-2022-35405)

September 23, 2022

The US Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2022-35405, a critical remote code execution vulnerability in ManageEngine PAM360, Password …