4 casos · pág. 1/1
Censys observed a 71% drop in internet-exposed Danfoss StoreView control panels in France in three days after the October 11 cyber-attack on hundreds of French supermarkets. The attack targeted refrigeration controllers that Danfoss confirmed were mostly older models without security updates (AK-SM800, AK-SC355) or newer models on outdate…
GreyNoise analyzed 4 billion sessions targeting edge infrastructure over 90 days and concluded that IP reputation feeds are structurally ineffective against residential proxy traffic. Attackers route scanning and reconnaissance through compromised home broadband, mobile and small-business connections, so source IPs look like legitimate us…
Between March 12 and 18, 2026, the GreyNoise Observation Grid (GOG) recorded 242,666 new scanning IPs geolocating to Hong Kong, 48.9% of all new scanning IPs seen that week. 99.7% never completed a TCP handshake, so GreyNoise classes them as "spoofable" (unverified source addresses). They carried no payloads and triggered no signatures. G…
The NSA, CISA, FBI, DOE and EPA issued a joint advisory (AA26-231A) warning of an active threat to Siemens S7 Series PLCs in U.S. critical infrastructure. Unattributed threat actors are conducting reconnaissance and capability development against U.S.-based installations using AI-generated exploitation scripts disguised as legitimate OT m…
