Grey Noise Intelligence Publishes Second Annual Retrospective to Help International Cybersecurity Community Defend Against Internet Exploitation

Summary: GreyNoise Intelligence published its second annual retrospective, "Decoding 2023: A GreyNoise Retrospective on Internet Exploitation," on January 17, 2024, drawing on a network of more than 3,100 sensors across over 200 countries. The company reported 17.3 million GNQL queries from over 195 geolocated source countries in 2023, added 290 new detection tags (up over 26% from 2022 for a total of 1,126), and said its platform tracks 705 CVEs, 259 of which have references in the CISA KEV catalog.
Why it matters: GreyNoise says its data provides early warning of mass exploitation equaling or surpassing CISA 60% of the time, and that the gap between a vulnerability going public and attackers using it at scale keeps shrinking - so the 259 tracked CVEs already in the KEV catalog are a measure of how little time patching teams have.

Read the original at GreyNoise Blog ↗