Decoding Mass Exploitation in 2023: A Grey Noise Perspective| Grey Noise Blog
Summary: GreyNoise Labs reported that among 242 CVEs it covered in 2023, the Cl0p ransomware group exploited the Progress MOVEit Transfer SQL injection flaw (CVE-2023-34362), causing data breaches at over 2.6K organizations and affecting roughly 90 million individuals. The report also noted that 2023 was the first time GreyNoise directly observed attackers deliberately changing their behavior to evade its specific detection capabilities, and that the gap between a vulnerability becoming public and mass exploitation continues to shrink.
Bottom line: A single MOVEit flaw reached 2.6K organizations and about 90 million people, and attackers are now adjusting tactics specifically to avoid the sensors watching them - so detection coverage tuned to last year's behavior may already be blind to this year's.
Read the original at GreyNoise Blog ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2023-27350CVE-2023-34362CVE-2023-4966
- Related
- CVE-2023-4966: Citrix Net Scaler ADC and Net Scaler Gateway Buffer Overflow Vulnerability Known Exploited Vulnerabilities · Oct 18, 2023CVE-2023-34362: Progress MOVEit Transfer SQL Injection Vulnerability Known Exploited Vulnerabilities · Jun 02, 2023CVE-2023-27350: Paper Cut MF/NG Improper Access Control Vulnerability Known Exploited Vulnerabilities · Apr 21, 2023