NoiseLetter July 2024

July has come and gone and the Olympics are in full swing, but we're not slowing down. We've got a new Vulnerability Intelligence Solution, a fresh website, and some killer blogs to check out. Super excited to see many of you next week at BlackHat, DEFCON and our sold-out NoiseFest. It's gonna be a blast! Read all about it in this month's NoiseLetter.

‍

Andrew Unfiltered

GreyNoise Founder Andrew Morris gives his thoughts, hot-takes, and whatever else he feels like.

‍

Featured

Is it really cRiTiCaL?

That’s where we come in, check out our new vulnerability solution, revolutionizing vulnerability management with real-time, In-the-Wild (ITW) exploitation data to truly understand severity. In today's cybersecurity landscape, teams are overwhelmed by countless vulnerabilities. Patching is disruptive, time-consuming, and can impact business operations. Our Vulnerability Intelligence Solution offers the critical insights needed to make informed decisions about which patches are truly urgent. Be the first to check it out! 🔥

Where to find us

• BlackHat + DEFCON (In-Person | August 4-9 ) We will not be a sponsor at BlackHat or DEFCON this year, but we will be there and would love to meet with you. Andrew will be presenting DEFCON Demo Lab on Saturday, 8/10 from 2PM-3:45PM in W308.
• BSides (in-Person | August 7) Glenn Thorpe will be presenting "Discover the Hidden Vulnerability Intelligence within CISA's KEV Catalog" at BSides LV on Wednesday at 2:30, don't miss it!
• NoiseFest (In-Person | Aug  8) UPDATE 7/31: Registration is now at capacity. Join the waitlist and we will let as many people in as space becomes available.
• mWISE (In-Person | Sep 18-19 ) We are proud to be  sponsoring mWISE this year! You can find us at our booth, for a demo and some swag.

Fresh Content

• Webcast: Storm⚡️Watch | Latest Episode
• Blog: The Tortilla Test: Ensuring Your Vulnerability Intelligence is Always Fresh
• Blog Series: Understanding the Election Cybersecurity Landscape‍
• Grimoire Blog: Unmasking Command & Control Servers: A Deep Dive into C2-101 is a must-read for inquiring minds. Discover mechanisms behind C2 infrastructure and explore techniques for mitigating their threats.

Recent Tags and Vulnerabilities

GreyNoise Labs released 17 tags during the month of July:

• Adobe Commerce and Magento CVE-2024-34102 XXE Attempt
• Adobe Commerce and Magento CVE-2024-34102 XXE Check
• Apache HugeGraph CVE-2024-27348 RCE Attempt
• GeoServer GeoTools CVE-2024-36401 RCE Attempt
• HomeMatic CCU2 RCE CVE-2021-33032 Attempt
• MailStudio 2000 2.0 RCE CVE-2000-0527 Attempt
• PHP DebugBar Information Disclosure Attempt
• Palo Alto Networks Login Scanner
• PmWiki pagelist RCE CVE-2011-4453 Attempt
• Ruijie RG-UAC CVE-2024-4813 RCE Attempt
• Ruiyou Tianyi SQLi Attempt
• Selenium RemoteWebDriver Scanner
• Symfony Fragment Scanner
• WordPress Fusion Builder SSRF CVE-2022-1386 Attempt
• Zyxel CPE Backdoor Account Attempt
• Zyxel CPE CVE-2024-40890 Command Injection Attempt
• osCommerce 2.2 Authentication Bypass Attempt

Community

• Request a New GreyNoise Tag - We've just published a new page to allow our amazing community to submit tag requests to the GreyNoise team. 
• ‍Try our Free Account - Quickly identify noisy scanners and trending attacks with our free plan.
• ‍Join our Community Slack and Discord- We share intel, give real time updates, and the occasional Dad joke. 

Meme of the Month

*Have a joke you want included in the next NoiseLetter? Submit Your Joke >>

‍

Not subscribed to our NoiseLetter? Subscribe here.