NoiseLetter August 2024

While we're still recovering from the whirlwind of BlackHat, DefCon, and the unforgettable NoiseFest (turns out y'all know how to have a good time!), the team hasn't missed a beat this August. From groundbreaking platform updates + fresh vulnerability intelligence to a lineup of can't-miss events (including our BSides NoVA keynote!), we've packed this NoiseLetter to the brim!

‍

Andrew Unfiltered

GreyNoise Founder Andrew Morris gives his thoughts, hot-takes, and whatever else he feels like.

‍

Featured

Vuln Prioritization, Project Plasma + Platform Updates!  

We have been busy innovating, with recent releases including our Vulnerability Prioritization solution for better remediation strategies, Project Plasma for researchers interested in honeypot deployment and traffic analysis, and significant platform updates to enhance data collection and visualization capabilities. To learn more about these exciting developments and our future roadmap, be sure to register for our upcoming product roadmap webinar on Thursday, October 24th, where we'll dive deeper into these advancements + preview what's next for GreyNoise.

Register Here >>

Where to find us

• BSidesNoVA (In-Person | Sept 7) Andrew Morris will be the KeyNote speaker at this year's conference. Don't miss it!  
• Censys Threat Hunting Workshop (In-Person | Sept 10) Join Michael Schwartz from Censys + Glenn Thorpe from GreyNoise, on a guided exploration through the Censys + GreyNoise data sets.‍
• mWISE (In-Person | Sept 18-19) We are proud to be  sponsoring mWISE this year! You can find us at booth #223, for a demo and some swag.
• LabsCon (In-Person | Sept 18-21) Andrew + Glenn will be in attendance and don't miss Glenn + Emily Austin's talk "Honeypots, HMIs, and Havoc? Investigating Internet-Exposed Control Systems."

Fresh Content

• Webcast: Storm⚡️Watch | Latest Episode‍
• Blog: Unveiling Vulnerability Insights from the CISA KEV Catalog at BSidesLV‍
• Blog: The Tortilla Test: Ensuring Your Vulnerability Intelligence is Always Fresh‍
• Grimoire Blog: BLUUID: Firewallas, Diabetics, And… Bluetooth 

Recent Tags and Vulnerabilities

GreyNoise Labs released 29 tags during the month of August:

• ‍Apache CloudStack RCE CVE-2024-38346 Attempt
• ‍Apache OFBiz CVE-2024-32113 Path Traversal Attempt
• ‍Apache Tomcat WebDAV Webshell RCE CVE-2017-12617 Attempt
• ‍Artica Proxy RCE CVE-2024-2054 Attempt
• ‍Asus ASUSWRT Information Disclosure Attempt
• ‍Asus ASUSWRT RCE CVE-2017-15653 Attempt
• ‍AsusWRT RCE CVE-2018-5999 Attempt
• ‍Chamilo wsConvertPpt RCE CVE-2023-34960 Attempt
• ‍Cisco RV320 Authenticated RCE CVE-2019-1652 Attempt
• ‍Cisco Small Business RV Series Router RCE CVE-2022-20708 Attempt
• ‍Cisco Small Business RV Series Router RCE CVE-2022-20712 Attempt
• ‍Craft CMS RCE CVE-2023-41892 Attempt
• ‍D-Link HNAP CVE-2019-10891 RCE Attempt
• ‍Ivanti EPM Privilege Escalation CVE-2023-28323 Attempt
• ‍Ivanti vTM Authentication Bypass CVE-2024-7593 Attempt
• ‍MVPower CCTV DVR RCE CVE-2016-20016 Attempt
• ‍Mikrotik RouterOS RCE CVE-2017-20149 Attempt
• ‍Milesight Information Disclosure CVE-2023-43261 Attempt
• ‍Netis SOHO Information Disclosure CVE-2024-23693 Attempt
• ‍Progress WhatsUp Gold RCE CVE-2024-4885 Attempt‍
• ReCrystallize ReCrystallize Server 5.10.0.0 Auth Bypass CVE-2024-26331 Attempt
• ‍SPIP RCE CVE-2023-27372 Attempt
• ‍SolarView Compact Arbitrary File Upload CVE-2022-44354 Attempt
• ‍WAGO RCE CVE-2023-1698 Attempt
• ‍Windows Server MadLicense Unauthenticated RCE CVE-2024-38077 Scanner
• ‍XiongMai DVR RTSP DoS CVE-2022-26259 Attempt
• ‍XiongMai uc-httpd Arbitrary File Read CVE-2017-7577 Attempt
• ‍jeecg-boot JimuReport RCE CVE-2023-4450 Attempt
• ‍upl.php File Upload Attempt
• ‍upl.php Scanner

Community

• Request a New GreyNoise Tag - We've just published a new page to allow our amazing community to submit tag requests to the GreyNoise team. 
• ‍Try our Free Account - Quickly identify noisy scanners and trending attacks with our free plan.
• ‍Join our Community Slack and Discord- We share intel, give real time updates, and the occasional Dad joke. 

Meme of the Month

*Have a joke you want included in the next NoiseLetter? Submit Your Joke >>

‍

Not subscribed to our NoiseLetter? Subscribe here.