Project Swarm: Join the Collective. Defend the Edge
Summary: GreyNoise launched Project Swarm, a research initiative that opens its deception sensor platform to security researchers, universities, non-profits, ISPs, and OEM manufacturers to contribute IP diversity, device profiles, and detection rules. The company says its Global Observation Grid already runs over 5,000 sensors across 80 countries processing more than 500 million sessions per day, and that state-sponsored groups like the Typhoon actors and APT41 have made edge devices such as firewalls and VPN gateways their preferred initial access point.
What you should know: GreyNoise puts average edge device patch time at roughly 32 days while exploit time is often near zero, so internet-facing firewalls and VPN gateways sit exposed for about a month to adversaries who are already watching - and those devices can't run EDR agents or often produce basic logs.
Read the original at GreyNoise Blog ↗
- Topics
- Threat Actors & Nation-State
- Related
- University of Texas at Arlington warns personal information stolen during cyberattack Cyber Risks · Nov 13, 2026Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Files Cyber Risks · Nov 13, 2026Hackers compromise 4,800 GitHub accounts to steal cloud credentials Cyber Risks · Nov 12, 2026