How to Defend Against Emerging Threats with Grey Noise Investigate 4.0 | Cybersecurity Blog | Grey Noise
Summary: GreyNoise released Investigate 4.0 with a new Trends page that shows internet-wide scanning activity targeting specific vulnerabilities, and it cites the Apache Log4j vulnerability (CVE-2021-44228), announced December 5, 2021, as an example where thousands of unique IP addresses generated billions or trillions of connection requests. The company cites an IBM report saying severe vulnerabilities in internet-facing enterprise software are exploited at higher frequency and massive scale, and that the time between disclosure and active exploitation has shrunk to hours.
Why it matters: The gap between a vulnerability's disclosure and active exploitation is now measured in hours, so the window in which a security team can determine whether it is exposed is shorter than most patch cycles.
Read the original at GreyNoise Blog ↗
- Topics
- Zero-Days & Exploits
- Mentions
- CVE-2021-44228
- Related
- Another Apache Log4j Vulnerability Is Actively Exploited in the Wild (CVE-2021-44228) (Updated) Cyber Risks ·CVE-2021-44228: Apache Log4j2 Remote Code Execution Vulnerability Known Exploited Vulnerabilities · Dec 10, 2021