Cyber Risks · GreyNoise Blog

Storm⚡️Watch | Cyber Insights | Hackers, Breaches, and Digital Distrust

Summary: A CISA Red Team assessment of a Federal Civilian Executive Branch organization found weaknesses in patch management, credential security, and network segmentation, pointing to the need for layered controls and behavior-based threat detection. The episode also covers the AT&T breach linked to the Snowflake cyberattack, which exposed call and text metadata for nearly all AT&T wireless customers over a six-month period in 2022, and a GreyNoise Labs path traversal flaw, CVE-2024-0769, in the unsupported D-Link DIR-859 router.

What you should know: The AT&T incident reached nearly every one of its wireless customers through a supply chain path, and the D-Link router flaw carries long-term exploitation risk precisely because the product is no longer supported.

Read the original at GreyNoise Blog ↗

Topics
Vulnerabilities & Patching
Mentions
CVE-2024-0769
Related
CVE-2024-0769: D-Link DIR-859 Router Path Traversal Vulnerability Known Exploited Vulnerabilities · Jun 25, 2025