Grey Noise Detects Active Exploitation of Silk Typhoon-Linked CVEs
Summary: GreyNoise analyzed CVEs linked to Silk Typhoon and found three of them actively exploited in the past 24 hours, confirmed by its Global Observation Grid. The source states that a heatmap shows activity over the past 45 days and that the accompanying data reflects the last 30 days.
What's compelling: Three Silk Typhoon-linked CVEs are being exploited right now, not in a future advisory cycle, and GreyNoise's 45-day heatmap suggests the activity is not a single spike. The group's name on the CVEs tells you who is on the other end of those requests hitting your internet-facing systems.
Read the original at GreyNoise Blog ↗
- Topics
- Zero-Days & Exploits
- Related
- New Sign Drop Exploit Can Abuse Windows Defender to Bypass Security Protections Cyber Risks · Nov 13, 2026New Sign Drop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access Cyber Risks · Nov 12, 2026November Patch Tuesday: An Overflowing Cornucopia of CVEs Cyber Risks · Nov 10, 2026