Vulnerability (CVE)
GreyNoise researchers traced an untagged shell-injection exploit in their Sift data that resembled CVE-2021-22986, a well-known SSRF bug, but was a different vulnerability discussed in many of the same write-ups. The investigation found that the...
GreyNoise researcher Ron Bowes built a simple clone of the F5 BIG-IP management port as a honeypot, ran it for a couple of weeks, and analyzed the captured traffic with tshark. The traffic included brute-force logins with credentials like "user123" and...
GreyNoise assembled a panel of security professionals for a May 30th webinar, "AI for Cybersecurity: Sifting the Noise," in which panelists argued that LLMs and GPTs are tools that recognize patterns in data rather than intelligent actors. One panelist...