GreyNoise in the news

The latest news, announcements, and perspectives from GreyNoise.

The Hacker News

CISA Warns of Actively Exploited JetBrains TeamCity Vulnerability

The Cyber Security News

CISA Warns of Actively Exploited JetBrains TeamCity Vulnerability

SC Magazine

JetBrains TeamCity critical flaw exploited; 1.4k servers compromised

Hackers Exploit TeamCity Bug to Create Admin Accounts

Unpatched JetBrains TeamCity On-Premises servers attacked en masse

Security Week

Critical TeamCity Vulnerability Exploitation Started Immediately After Disclosure

Bleeping Computer

Critical TeamCity flaw now widely exploited to create admin accounts

Authentication bypass vulnerabilities in TeamCity: everything you need to know

Sonatype

The curious case of 'csrf-magic': A case study in supply chain poisoning

ConnectWise ScreenConnect: Authentication Bypass Deep Dive

PWN Defend

Some Useful Threat Analysis Tools

Sapphire Ventures

Silicon Valley Meets The Department of Defense: Top Observations & Opportunities in Defense Tech

Help Net Security

Akira, LockBit actively searching for vulnerable Cisco ASA devices

Is your cloud security strategy ready for LLMs?

Zero-day Vulnerability – Examples, Detection & Prevention

Let's revisit the Ivanti Connect Secure clusterfudge

CISA orders Ivanti devices targeted by Chinese hackers be disconnected

Security Week

45,000 Exposed Jenkins Instances Found Amid Reports of In-the-Wild Exploitation

Bleeping Computer

Ivanti warns of new Connect Secure zero-day exploited in attacks

HelpNetSecurity

PoC for easily exploitable Fortra GoAnywhere MFT vulnerability released (CVE-2024-0204)

Atlassian Confluence Data Center under active exploitation in older versions

Atlassian Confluence Servers Attacked From 600+ IP Addresses

Bleeping Computer

Ivanti: VPN appliances vulnerable if pushing configs after mitigation

Atlassian Confluence Server RCE attacks underway from 600+ IPs