Grey Noise Observes Exploitation of Three Newly Added KEV Vulnerabilities
Summary: On March 3, 2025, CISA added five vulnerabilities to its Known Exploited Vulnerabilities catalog, confirming exploitation in the wild. GreyNoise reports it had visibility into these vulnerabilities, including Hitachi Vantara Pentaho BA Server and Progress WhatsUp Gold path traversal flaws, before their KEV addition.
Key Takeaway: GreyNoise tagged these vulnerabilities before CISA's KEV inclusion, so the gap between first observed exploitation and official cataloging is where defenders either had early warning or had none.
Read the original at GreyNoise Blog ↗
- Topics
- Zero-Days & Exploits
- Related
- New Sign Drop Exploit Can Abuse Windows Defender to Bypass Security Protections Cyber Risks · Nov 13, 2026New Sign Drop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access Cyber Risks · Nov 12, 2026November Patch Tuesday: An Overflowing Cornucopia of CVEs Cyber Risks · Nov 10, 2026