Amid Reports of Worldwide Reboots, Grey Noise Observes In-the-Wild Activity Against Dray Tek Routers
Summary: GreyNoise reported in-the-wild activity against several known vulnerabilities in DrayTek routers, following reports of widespread reboots affecting those devices globally. GreyNoise said it cannot confirm a direct connection between the observed activity and the reboots, and it did not name the specific CVEs in the text.
Why it matters: GreyNoise is tracking exploitation attempts against DrayTek routers across its Global Observation Grid over the past 45 days, but it cannot yet tie that activity to the global reboots - leaving defenders to monitor and respond without a confirmed cause.
Read the original at GreyNoise Blog ↗
- Topics
- Detection & Response
- Related
- YARA-X 1.23.0 Release, (Sun, Nov 15th) Cyber Risks · Nov 15, 2026Inside Falcon AI Gateway: One Control Point for AI Traffic Cyber Risks · Nov 13, 2026Macfinger Click Fix campaign sends Down TheDRAIN infostealer for macOS, (Fri, Nov 13th) Cyber Risks · Nov 13, 2026