Covers: Vulnerabilities & PatchingDetection & ResponseThreat Actors & Nation-StateZero-Days & ExploitsEndpoint & Network SecurityOT / ICS & Critical InfrastructureData BreachesPhishing & Social EngineeringIdentity & Access ManagementMalware
GreyNoise released Investigate 4.0 with a new Trends page that shows internet-wide scanning activity targeting specific vulnerabilities, and it cites the Apache Log4j vulnerability (CVE-2021-44228), announced December 5, 2021, as an example where thousands...
CVE-2023-49105 is a WebDAV API authentication bypass in ownCloud affecting versions 10.6.0 through 10.13.0, allowing an attacker who knows a username to access, modify, or delete any file without authentication, even when no signing key is configured, by...
On October 11th, 2023, a heap-based buffer overflow in curl was disclosed as CVE-2023-38545, affecting libcurl 7.69.0 through 8.3.0. Reaching the vulnerable code path requires the application to use a SOCKS5 proxy mode and attempt to resolve a hostname of...
CVE-2022-28958 was reported as a remote code execution flaw in D-Link DIR816L_FW206b01 firmware via the value parameter at shareport.php, but testing across firmware versions including the reportedly vulnerable 2.06b1 found no evidence of the...
GreyNoise founder and CEO Andrew Morris joined Cribl's Ed Bailey for a live stream on helping SOC analysts overcome common struggles and improve detections, and the Cribl + GreyNoise integration is available now. In the conversation, Bailey said 30% of...
GreyNoise closed a $15M Series A round led by Radian Capital, five years after founder Andrew Morris started the company in 2017 to build a global sensor network that collects and analyzes internet scanning data. The company says it serves more than 2,000...
King & Union launched Avalon Marketplace, which it describes as the industry's first marketplace to tokenize fractional threat intelligence datasets through partner feeds, integrations, and enrichment sources. Partners named at launch include Blueliv,...
GreyNoise Intelligence raised a $15 million Series A round led by Radian Capital, with participation from CRV, Inner Loop, Stone Mill Ventures and Paladin Capital, bringing total funding to $21 million. The company uses a global network of passive sensors...
GreyNoise Intelligence was named Most Innovative Security Solution of 2021 by the Tech Ascension Awards, selected from a pool of more than 500 applicants on criteria including technology innovation, market research, and competitive differentiators. The...
GreyNoise Intelligence announced a new suite of cybersecurity features it calls "Triple Threat," aimed at providing advanced intelligence on unknown IP addresses that generate thousands of daily threat alerts for security teams. The company says its global...
GreyNoise Intelligence announced a strategic partnership with the Defense Innovation Unit to help the Department of Defense identify and understand internet-wide scan and attack activity. During the initial stages of the engagement, DoD identified an...
GreyNoise Intelligence has acquired Krit, the product design and development firm it had collaborated with for years, and Krit's team of technical designers and developers will join GreyNoise's product team. Krit's design work has supported GreyNoise's...
GreyNoise Intelligence announced it has achieved SOC 2 Type I compliance under AICPA standards, with an unqualified opinion from the third-party audit. The company collects, analyzes, and classifies internet scanning traffic to separate malicious threats...
GreyNoise introduced Investigate 4.0, a threat intelligence tool it says helps security analysts identify and respond to opportunistic scan-and-exploit attacks in real time, including a new Trends Page for spotting internet attacks targeting specific...
GreyNoise Intelligence was awarded a production contract with a $30 million ceiling by the U.S. Department of Defense, following an initial prototype with the Defense Innovation Unit announced earlier in 2021. The contract lets all DoD organizations...
The Globee Awards announced the Grand, Gold, Silver and Bronze winners of its 18th Annual 2022 Cyber Security Global Excellence Awards, with a judging panel of more than 55 executives and professionals whose average scores determined the results. Grand...
Confluera announced the integration of GreyNoise Intelligence into its cloud detection and response product, giving customers added context on discovered attacks, reduced noise, and more prioritized event signals at no additional cost. Confluera says its...
GreyNoise Intelligence named Ash Devata, formerly Vice President and General Manager at Cisco leading the Duo and Zero Trust businesses, as its new CEO on February 14th, 2024. Founder Andrew Morris moves to Chief Architect, and the company says the change...
GreyNoise describes internet noise as unsolicited communications from tens of thousands of IP addresses hitting every internet-connected machine daily, generating thousands of events for SOC teams to analyze even though much of the traffic is harmless...
GreyNoise and Randori hosted a joint webinar on December 15, 2021, discussing their teams' expert insights into researching and remediating the Apache Log4j vulnerability tracked as CVE 2021-44228. The speakers were Andrew Morris, Founder and CEO of...
Kasada, which detects malicious automation and bot networks and reports seeing billions of bot interactions every month, has supplied its bot traffic intelligence to GreyNoise. GreyNoise, which collects, analyzes and labels data on IP addresses that scan...
GreyNoise was named a 2021 SINET16 Innovator, an annual award that selects 16 companies from a pool of 190 applicants across 18 countries, all under $15 million in revenue. SINET chairman and founder Robert Rodriguez announced the selection, congratulating...
GreyNoise's Nick Roy walks through the GreyNoise Visualizer, the web interface for looking up IP addresses and querying its datasets, which include a noise dataset gathered from the company's sensor network and the RIOT (Rule It Out) dataset of roughly 60...
GreyNoise released a Visualizer, a free web application for searching and viewing data on IPs that saturate security tools with internet noise, drawn from its collection of global internet-wide scan and attack traffic. Users can query by IP address, CIDR...
GreyNoise Trends lets security teams query hosts tagged with activity such as a CGI script scanner classified as malicious in the last day, then drill into a tag to see time series data on the number of IPs observed over the last 3, 10, or 30 days. For...
Brad Chiappetta of GreyNoise walks through Python scripting against the GreyNoise API, showing each call first with the Python requests library and then with the GreyNoise SDK, starting with the ping endpoint and moving through the Community API, the IP...
GreyNoise held its third quarterly Open Forum, a virtual town hall open to its community and other interested parties, featuring Remy (@_mattata), Andrew Morris (@Andrew___Morris), and the product team. The session covered how to handle the next Log4j-like...
GreyNoise released Maltego Transforms in two sets: a Community version that performs a simple IP lookup against the GreyNoise community API, and an Enterprise version requiring a paid Maltego license and a full GreyNoise API key that adds noise context,...
GreyNoise founder and CEO Andrew Morris is presenting at the Security Analytics & XDR Demo Forum, held Tuesday, August 24 to Thursday, August 26, on improving analyst efficiency by eliminating internet noise from security alerts. In the demo, an IP address...
GreyNoise founder and CEO Andrew Morris demonstrated searching the platform by CVE to find systems probing for or exploiting vulnerabilities at internet scale, returning 154 results for the VMware vSphere flaw CVE-2021-21985 and 35 devices for the older...