Vulnerability (CVE)
Microsoft's April 2023 Patch Tuesday fixed 99 vulnerabilities, including eight rated critical and 90 rated important, with one flaw actively exploited in the wild: CVE-2023-28252, an elevation of privilege bug in the Windows Common Log File System Driver...
GreyNoise published three tags for Microsoft Message Queuing (MSMQ) activity tied to QueueJumper (CVE-2023-21554), a critical unauthenticated remote code execution flaw patched in April 2023 Patch Tuesday, alongside two unauthenticated remote DoS...
GreyNoise's April 2023 update added 20 new tags (10 malicious activity, 6 benign actor, 4 unknown activity) and extended its IP Timeline feature from 60 to 90 days of stored IP history. The company also reclassified environment file crawlers from unknown...
On Monday, May 1, 2023, CISA added CVE-2021-45046, CVE-2023-21839, and CVE-2023-1389 to the Known Exploited Vulnerabilities list, covering Apache Log4j, Oracle WebLogic, and TP-Link Archer AX21 flaws. GreyNoise users had visibility into which IPs were...