Grey Noise Intelligence Releases New Research, Raising Urgent Concerns About the Speed and Repetition of Cybersecurity Vulnerabilities

Summary: GreyNoise Intelligence released its third annual "GreyNoise 2025 Mass Internet Exploitation Report" on February 27, 2025, drawing on a network of nearly 4,000 sensors in over 200 countries that track hundreds of millions of events per day. In 2024 the company created 573 new tags covering 394 CVEs, 84 of which aligned with CISA's Known Exploited Vulnerabilities catalog, and it observed multiple CVEs showing signs of exploitation before being added to that catalog.
Key Takeaway: GreyNoise says attackers scan the entire internet because it is quick and cheap, then go after what is exposed immediately, caring less about CVSS scores or KEV lists. If exploitation can precede a CVE's addition to CISA's KEV catalog, a patch queue driven by that list is already behind.

Read the original at GreyNoise Blog ↗

Topics: Detection & Response
Related: YARA-X 1.23.0 Release, (Sun, Nov 15th) Cyber Risks · Nov 15, 2026
Inside Falcon AI Gateway: One Control Point for AI Traffic Cyber Risks · Nov 13, 2026
Macfinger Click Fix campaign sends Down TheDRAIN infostealer for macOS, (Fri, Nov 13th) Cyber Risks · Nov 13, 2026