25 casos · pág. 2/2
GreyNoise announced the Threat Brief Library in the GreyNoise Visualizer, a searchable and filterable repository of its threat intelligence briefs, downloadable as PDF. The library holds three report types: the weekly At The Edge brief, event-driven Executive Situation Reports on single campaigns or actively exploited vulnerabilities, and…
GreyNoise observed automated scanners impersonating the web crawlers of OpenAI, Anthropic, Google, Perplexity, DeepSeek and Amazon while requesting environment files, cloud access keys, private keys and password stores. A cluster of 13 forged AI crawler names from eight companies was seen; six names (belonging to Anthropic, OpenAI, Google…
GreyNoise reports a proxyjacking campaign by a malicious cyber actor (tracked as skynox7) that exploited network edge devices globally to covertly install Pawns.app proxyware and monetize victims' bandwidth. At least 143 devices in 34 countries were compromised, and the actor also appeared to target other DVR/NVR brands such as Hikvision …
On 24 September 2026, GreyNoise observed a malicious actor using 149.104.78.141 to attempt pre-disclosure zero-day exploitation of a Citrix NetScaler Gateway on a Project Swarm participant sensor. No CVE-specific detections existed at the time, but behavioral detections labeled the activity malicious within seconds. The attempt failed to …
GreyNoise observed an increase in scanning and exploitation attempts against Digital Video Recorders (DVRs) in Ukraine between 21 September and 1 October 2026, coinciding with an escalation in Russian strikes. Most of the activity targeted CVE-2021-36260, an unauthenticated command injection flaw in unpatched Hikvision products. GreyNoise…
