Grey Noise | Zero-day exploits in the Grey Noise dataset

Summary: GreyNoise says it often observes widespread exploitation of a vulnerability either before a CVE is assigned or before vendors communicate anything, and its sensor data going back to 2020 lets it check whether a newly disclosed flaw was seen in the wild recently or historically. The post argues that vendor messaging about withholding details to prevent malicious actors from obtaining useful information conflicts with giving customers time to patch, since a released patch can be compared to the prior version to locate the targeted code.
What you should know: The exploitation clock does not start when a vendor's PR team announces it - GreyNoise says it has seen products exploited two weeks before a bulletin, so a disclosure date is not the date your exposure began.

Read the original at GreyNoise Blog ↗