Storm⚡️Watch | Cyber Podcast | Kansas City Hacking Indictment, Project Send Zero-Day & The Greyt Migreytion

Summary: This episode of GreyNoise's Storm Watch podcast covers a federal indictment for computer hacking in Kansas City and VulnCheck's discovery of CVE-2024-11680, a ProjectSend vulnerability being exploited in the wild. It also cites a community poll in which half of respondents chose vulnerability management and patching as their top resource priority, with threat intelligence and hunting second at 27.3%.
Bottom line: A ProjectSend vulnerability is already being exploited in the wild, and only half of the polled community named vulnerability management and patching as their top priority - the gap between that 50% and full coverage is where an unpatched CVE-2024-11680 sits.

Read the original at GreyNoise Blog ↗

Topics: Detection & Response
Mentions: CVE-2024-11680
Related: CVE-2024-11680: Project Send Improper Authentication Vulnerability Known Exploited Vulnerabilities · Dec 03, 2024
YARA-X 1.23.0 Release, (Sun, Nov 15th) Cyber Risks · Nov 15, 2026
Inside Falcon AI Gateway: One Control Point for AI Traffic Cyber Risks · Nov 13, 2026