Grey Noise Detects Active Exploitation of CVEs Mentioned in Black Basta’s Leaked Chat Logs
Summary: A leak of internal chat logs from the Black Basta ransomware group revealed 62 CVEs the group discussed, a list first compiled by VulnCheck. GreyNoise analyzed internet-wide exploitation activity for those vulnerabilities and found 23 of the 62 were actively targeted within the past 30 days, with a subset targeted within the past 24 hours.
Why it matters: Twenty-three of the 62 vulnerabilities a single ransomware crew discussed are being exploited right now, including in enterprise software and security appliances - so the question is which of those 23 sit in your estate today.
Read the original at GreyNoise Blog ↗
- Topics
- Zero-Days & Exploits
- Related
- New Sign Drop Exploit Can Abuse Windows Defender to Bypass Security Protections Cyber Risks · Nov 13, 2026New Sign Drop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access Cyber Risks · Nov 12, 2026November Patch Tuesday: An Overflowing Cornucopia of CVEs Cyber Risks · Nov 10, 2026