Grey Noise 2022 Mass Exploitation Report

Summary: GreyNoise added over 230 new detection tags in 2022 and published its inaugural mass exploitation report covering that year's landscape. The report breaks down the CVE-2022-1388 F5 Big-IP iControl REST authentication bypass, the depth and breadth of exploitation of CVE-2022-26134 in Atlassian Confluence, and the effect of CISA Known Exploited Vulnerabilities catalog releases on defenders.
What you should know: GreyNoise's central finding is that many vulnerabilities drawing media attention turn out to be nothing burgers, while others are under genuine mass exploitation - so a patch queue ranked by headlines will not match what adversaries are actually hitting.

Read the original at GreyNoise Blog ↗

Topics: Detection & Response
Mentions: CVE-2022-1388 CVE-2022-26134
Related: Mining The Undiscovered Country With Grey Noise EAP Sensors: F5 BIG-IP Edition Cyber Risks ·
Zero-Day Exploitation of Atlassian Confluence Cyber Risks ·
CVE-2022-26134: Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability Known Exploited Vulnerabilities · Jun 02, 2022