Storm Watch | 2024 Cybersecurity Update: Lockbit Takedown, GRU Botnet Disruption & Essential Security Practices

Summary: This GreyNoise Storm Watch episode covers the international police operation that disrupted the Lockbit cybercrime gang and the Justice Department's court-authorized disruption of a botnet controlled by the Russian GRU. It also discusses new vulnerabilities in SolarWinds software, the Shanghai Anxun/I-SOON hack and leak, a state government leak and hack, and Eclypsium's teardown of Ivanti as a case for SBOMs and a resilient SDLC.
Bottom line: A police takedown of Lockbit and a court-ordered disruption of a GRU botnet are the headline wins, but the same episode lists fresh SolarWinds vulnerabilities and a state government breach - the disruption of one gang does not reduce the exposure your own software estate carries.

Read the original at GreyNoise Blog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2021-44529
Related: CVE-2021-44529: Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability Known Exploited Vulnerabilities · Mar 25, 2024
Practical Vulnerability Archaeology Starring Ivanti's CVE-2021-44529 | Grey Noise Blog Cyber Risks ·
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026