Cyber Risks · GreyNoise Blog

Storm⚡️Watch | Cyber Podcast | JA4+ Creator Reveals All: Water Systems at Risk & Why NIST is Playing Catch-up

Summary: This GreyNoise podcast episode features John Althouse, creator of JA4+, a suite of network fingerprinting methods using human-readable formats and enhanced detection capabilities. The episode also covers findings of potential vulnerabilities in around 300 U.S. drinking water systems and VulnCheck's NVD++ initiative, which provides CPE data for nearly 77% of CVEs published in 2024 versus NIST's 41%.

What's compelling: Roughly 300 U.S. drinking water systems were found to carry potential vulnerabilities, and the CPE data gap - 77% coverage from VulnCheck against NIST's 41% - means the vulnerability record security teams rely on is incomplete for most of this year's CVEs.

Read the original at GreyNoise Blog ↗

Topics
Data Breaches
Related