Faster Threats, Faster Defense: Grey Noise Launches Real-Time Threat Defense Capabilities at Black Hat 2025

Summary: GreyNoise announced new real-time threat defense capabilities at Black Hat 2025, including push-based delivery of verified malicious IP data via webhooks and native integrations with SOAR platforms such as Splunk SOAR, Palo Alto Networks XSOAR, and IBM QRadar SOAR. The company says attackers use automation, AI, and ephemeral infrastructure to scan, breach, and pivot within minutes, sometimes before a CVE is publicly disclosed, while defenders still query APIs and pull feeds manually.
What you should know: The stated gap is time: attacks can complete before a CVE is even published, while many defenders still operate in batch mode waiting on feeds and manual queries.

Read the original at GreyNoise Blog ↗

Topics: Detection & Response
Related: YARA-X 1.23.0 Release, (Sun, Nov 15th) Cyber Risks · Nov 15, 2026
Inside Falcon AI Gateway: One Control Point for AI Traffic Cyber Risks · Nov 13, 2026
Macfinger Click Fix campaign sends Down TheDRAIN infostealer for macOS, (Fri, Nov 13th) Cyber Risks · Nov 13, 2026