Grey Noise Round Up: Product Updates - April 2023
Summary: GreyNoise's April 2023 update added 20 new tags (10 malicious activity, 6 benign actor, 4 unknown activity) and extended its IP Timeline feature from 60 to 90 days of stored IP history. The company also reclassified environment file crawlers from unknown to malicious intent on April 25, 2023, a change that reclassified over 11,000 IPs as malicious, and added a tag for CVE-2023-1389, a pre-auth command injection flaw in TP-Link Archer routers.
What's compelling: The reclassification alone moves more than 11,000 IPs into the malicious category, so anyone blocking on GreyNoise's malicious tag will see a jump in blocked traffic that has nothing to do with a new campaign.
Read the original at GreyNoise Blog ↗
- Topics
- Detection & Response
- Mentions
- CVE-2023-1389CVE-2023-21554CVE-2023-27350
- Related
- CVE-2023-1389: TP-Link Archer AX-21 Command Injection Vulnerability Known Exploited Vulnerabilities · May 01, 2023