Storm Watch | Cyber News | Mistral AI, Progress Software WS_FTP, libwebp Vulnerability, OASIS CSAF

Summary: This episode of GreyNoise's Storm Watch podcast covers the challenges of analyzing scan data and the debate between the terms "threat hunting" and "thrunting," followed by a deep dive into the WS_FTP exposure situation. The hosts also discuss the libwebp debacle and the confusion caused by changing CVEs, mention FEMA's upcoming nationwide emergency alert system test, and announce a new GreyNoise Early Access Program feature called Sift for early attack triage.
Bottom line: The hosts flag the libwebp debacle as drawing too little attention, with changing CVEs sowing confusion - a reminder that a widely embedded library can stay under-patched while identifiers shift beneath responders' feet.

Read the original at GreyNoise Blog ↗

Topics: Detection & Response
Related: YARA-X 1.23.0 Release, (Sun, Nov 15th) Cyber Risks · Nov 15, 2026
Inside Falcon AI Gateway: One Control Point for AI Traffic Cyber Risks · Nov 13, 2026
Macfinger Click Fix campaign sends Down TheDRAIN infostealer for macOS, (Fri, Nov 13th) Cyber Risks · Nov 13, 2026