Noise Letter February 2026

Summary: GreyNoise's February 2026 newsletter highlights its 2026 State of the Edge Report, built on 162 days of internet-scale data, which surfaces RCE patterns, legacy CVE abuse, and residential botnet growth in edge infrastructure attacks. The company also announced that GreyNoise intelligence is now available across three CrowdStrike Falcon surfaces (Next-Gen SIEM, Falcon Fusion SOAR, and Charlotte AI) and added four JA4+ fingerprinting fields to GNQL for Hunt customers.
What's compelling: The report's finding of residential botnet growth means attack traffic increasingly comes from ordinary consumer IP addresses, which reputation-based blocking lists are least equipped to flag.

Read the original at GreyNoise Blog ↗

Topics: Detection & Response
Related: YARA-X 1.23.0 Release, (Sun, Nov 15th) Cyber Risks · Nov 15, 2026
Inside Falcon AI Gateway: One Control Point for AI Traffic Cyber Risks · Nov 13, 2026
Macfinger Click Fix campaign sends Down TheDRAIN infostealer for macOS, (Fri, Nov 13th) Cyber Risks · Nov 13, 2026