14 casos · pág. 1/1
GreyNoise announced that its internet-scanning IP classification data is now available across the CrowdStrike Falcon platform through the GreyNoise Foundry App, listed on the CrowdStrike Marketplace. This is a product and integration announcement with no direct threat or incident. The integration is meant to help SOC teams separate benign…
GreyNoise reports that on 14 May 2026 its Global Observation Grid recorded 119,842 malicious, non-spoofable IPs targeting edge infrastructure. Compared against eleven widely used OSINT and commercial feeds, average coverage was 2.0%, and no single feed exceeded 5%. Even the largest list (Avastel, about 500,000 IPs) caught under 2%, and ve…
GreyNoise announced Project Swarm, a research initiative that opens its deception platform, the Global Observation Grid (5,000+ sensors in 80 countries, 500M+ sessions per day), to outside contributors. The stated aim is better visibility into attacks on network edge devices (firewalls, VPN gateways, routers, load balancers). These device…
GreyNoise announced C2 Detection, a new intelligence module that identifies compromised edge and perimeter devices (routers, firewalls, VPN concentrators) from their outbound connections to attacker-controlled infrastructure. The capability extends GreyNoise beyond inbound scanning intelligence into post-exploitation, outbound-facing dete…
This GreyNoise blog post is a product-oriented piece describing five workflows the vendor wires into customer SOAR platforms. It reports no incident, vulnerability or threat actor activity. The use cases are automated IP enrichment, early warning of exploitation spikes against vendor CVEs, detection of compromised edge devices, validated …
GreyNoise published a vendor blog post describing four ways SOC teams can use its internet-wide scan and attack classification to improve SIEM detection. The use cases separate opportunistic mass-scanning noise from activity that may be targeted at an organization. The post is product-oriented guidance and does not describe a specific inc…
GreyNoise announced an updated integration with Google Security Operations that brings its internet-scanner classification data into the SIEM/SOAR platform. The aim is to separate mass-scanning noise from activity targeting the customer's own environment. GreyNoise says it observes over 800,000 unique IPs daily across 5,000+ sensors in 80…
GreyNoise announced an expanded integration with the CrowdStrike Falcon platform, adding content for Falcon Next-Gen SIEM and Charlotte Agentic SOAR. It is delivered through the GreyNoise Foundry App in the CrowdStrike Marketplace. The package brings GreyNoise's internet-wide scanning and exploitation observations into SOC detection and a…
GreyNoise announced Tactics, a new feature in the GreyNoise Visualizer (Observe → Tactics) that maps attacker sessions captured by GreyNoise Deception Sensors to the MITRE ATT&CK framework. It extends the company's visibility beyond Reconnaissance and Initial Access, following the earlier C2 Detection Module, to show what adversaries do a…
GreyNoise announced the availability of the Intelligence Dashboard in its Visualizer platform. It lets users pin CVEs, tags, countries, IPs and GNQL queries into a persistent, always-current view of scan and attacker traffic observed by its global sensor network. This is a product announcement and does not describe a threat, vulnerability…
GreyNoise has described a revised detection engineering approach that uses agentic workflows built on frontier large language models to keep pace with rising CVE volumes. The post says CVE entries grew from 16,510 in 2018 to 48,162 in 2025, and that generative AI has contributed to 130% growth from 2022 through 2025. It also claims the me…
GreyNoise has released a redesigned GreyNoise Visualizer with a persistent sidebar organized into three areas: Intelligence (IPs and CVEs), Observation (Deception Sensors) and Automation (alerts, feeds, blocklists). The update is product news and describes no threat, vulnerability or incident. It adds global search (Command + K) across IP…
GreyNoise announced that a former Head of Global Signals Operations at Google Threat Intelligence Group (GTIG), who joined Google through its 2022 acquisition of Mandiant, is its new Senior Vice President of Adversary Operations. This is a personnel and business announcement with no incident, vulnerability or active campaign. The post say…
GreyNoise announced the Threat Brief Library in the GreyNoise Visualizer, a searchable and filterable repository of its threat intelligence briefs, downloadable as PDF. The library holds three report types: the weekly At The Edge brief, event-driven Executive Situation Reports on single campaigns or actively exploited vulnerabilities, and…
