Storm Watch | Cyber News | HTTP2 Vulnerability, Clorox Cyber Attack, Grey Noise Sift
Summary: This episode covers a Microsoft report stating that basic security hygiene could protect against 99% of attacks, with 80% of ransomware compromises occurring via unmanaged devices. It also discusses a Confluence zero-day that lets remote attackers create new users, a cyber attack on Clorox expected to cause a significant sales drop potentially timed to flu season, and an HTTP/2 denial-of-service vulnerability whose best current protection is a DDoS mitigation service.
What's compelling: The Confluence flaw creates new user accounts during exploitation, so patching alone leaves unauthorized accounts behind unless user accounts are audited afterward. And with 80% of ransomware compromises arriving through unmanaged devices, the endpoints outside your inventory are the ones carrying the risk.
Read the original at GreyNoise Blog ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026