Noise Letter February 2025
Summary: GreyNoise's February 2025 NoiseLetter reports active exploitation of PAN-OS CVE-2025-0108, a surge in ThinkPHP and ownCloud attacks, and new findings on Cisco vulnerabilities tied to Salt Typhoon. The newsletter's Mass Exploitation Report covers which CVEs were exploited most in 2024, how ransomware groups use mass exploitation, and notes attackers automating exploitation at scale against new and old vulnerabilities, some before they appear in KEV.
What's compelling: Attackers are automating exploitation at scale and hitting some vulnerabilities before they show up in KEV, which means waiting for that catalog to prioritize patching leaves a window you may not see coming.
Read the original at GreyNoise Blog ↗
- Topics
- Threat Actors & Nation-State
- Mentions
- CVE-2025-0108
- Related
- CVE-2025-0108: Palo Alto Networks PAN-OS Authentication Bypass Vulnerability Known Exploited Vulnerabilities · Feb 18, 2025