Noise Letter August 2026

Summary: GreyNoise marked its ninth anniversary with a NoiseLetter announcing an expanded CrowdStrike Falcon integration, including a Falcon Next-Gen SIEM dashboard, correlation rules that detect allowed inbound traffic from malicious infrastructure, and SOAR playbooks, with the GreyNoise Foundry App available in the CrowdStrike Marketplace. The same letter describes a redesigned Visualizer with a sidebar organized around Intelligence, Observation, and Automation, and a new Feeds API that lets Platform customers pull Feed events in batches instead of receiving individual events pushed to a webhook.
Bottom line: The new correlation rules target allowed inbound traffic from malicious infrastructure - traffic your perimeter already let through - so the question is whether your detection stack is watching what got in rather than only what was blocked.

Read the original at GreyNoise Blog ↗