NoiseLetter - December 2023

Summary

As the year wraps up, we wanted to take a moment to look back at what a remarkable year it's been. None of it would've been possible without you and the fantastic GreyNoise community. In this NoiseLetter, we're excited to share some of the cool stuff that happened this year and give you a sneak peek at what's coming up in the new year.

Andrew Unfiltered

GreyNoise CEO Andrew Morris gives his thoughts, hot-takes, and whatever else he feels like.

‍

2023 By the Numbers

Take a look at a few of the things we've accomplished this year:

17.3 million - Valid GNQL queries
195 - Countries Queries came from
290 - New tags
242 - CVE's we had tags for

Top 5 CVEs searched for in GreyNoise:

huawei hg532 upnp cve-2017-17215 worm
realtek miniigd upnp worm cve-2014-8361
gpon cve-2018-10561 router worm
netgear command injection cve-2016-6277

Where to find us

Tags Webinar Series (Virtual | Wednesday, Jan. 10, 17, 24) Sift is a GreyNoise Intelligence application that uses advanced AI/ML to help Threat Intelligence Analysts and Detection Engineers stay ahead of emerging threats.
GreyNoise 101 +201 (Virtual | Thursday, Jan. 25) This 1-hour session is perfect for anyone new to GreyNoise and interested in learning how to use the platform. In the first 30 minutes, we'll cover the basics and give you a solid foundation. Stick around for the last 30 minutes to dive into more advanced use cases. Don't miss this opportunity to level up your GreyNoise skills.
SANS CTI Summit & Training (In-Person| Washington DC | Jan 29-30) GreyNoise is excited to be sponsoring this years summit! This event gives CTI professionals a chance to engage with leading experts, SANS instructors, and peers in the community.

2023 Top Content

OnDemand Webinar: Sift: How to Leverage the Power of AI/ML to Improve Threat Analysis
Demo: Risky Biz Product Demonstration with Andrew Morris
Blog: Unpacking CVE-2023-20198: A Critical Weakness In Cisco IOS XE
Blog: Debugging D-Link: Emulating firmware and hacking hardware
Blog: CVE-2023-49103: ownCloud Critical Vulnerability Quickly Exploited in the Wild
Podcast/Vlog: Weekly Livestream - Storm Watch
eBook: GreyNoise 2023 Guide to Threat Hunting
eBook: 2022 Mass Exploitation Report
Country Reports: Attackers Without Borders
Tagvent Calendar: Top Tags of 2023

Newly Released Tags

GreyNoise Labs released 24 tags during the month of December

2023-12-20 — YAML Insecure Deserialization
2023-12-15 — 3CX CRM SQL Injection Attempt
2023-12-15 — rConfig CVE-2019-16662 RCE Attempt
2023-12-15 — WuzhiCMS CVE-2018-11528 SQLi Attempt
2023-12-14 — WordPress Backup Migration RCE Attempt
2023-12-13 — Bitrix CVE-2023-1713 RCE Check
2023-12-12 — Apache Struts CVE-2023-50164 RCE Attempt
2023-12-11 — Apache Flink File Upload Attempt
2023-12-11 — KubeOperator Unauth API Access Attempt
2023-12-08 — JBoss Seam RCE Attempt
2023-12-08 — vBSEO RCE Attempt
2023-12-08 — Lexmark Printers RCE Attempt
2023-12-07 — WordPress Vistor Statistics SQL Injection Attempt
2023-12-07 — WordPress WPCargo Track & Trace RCE Attempt
2023-12-07 — TOTOLink CVE-2023-30013 RCE Attempt
2023-12-07 — WordPress VR Calendar RCE Attempt
2023-12-06 — D-Link DAP-2020 Information Disclosure Attempt
2023-12-06 — F5 BIG-IP iControl rpmspec RCE Attempt
2023-12-05 — Oracle WebLogic CVE-2017-10271 RCE Attempt
2023-12-04 — SysAid Path Traversal Attempt
2023-12-04 — ownCloud Authentication Bypass Attempt
2023-12-04 — Brekeke Scanner
2023-12-04 — Cisco VPN Router File Upload Attempt
2023-12-01 — Ax Developer CMS Path Traversal Attempt

Joke of the Month

*Have a joke you want included in the next NoiseLetter? Submit Your Joke >>

Community

Request a New GreyNoise Tag - We've just published a new page to allow our amazing community to submit tag requests to the GreyNoise team.
‍Try our Free Account - Quickly identify noisy scanners and trending attacks with our free plan.
‍Join our Community Slack and Discord- We share intel, give real time updates, and the occasional Dad joke.
Join the GreyNoise Team - Help develop the next generation of internet intelligence products. GreyNoise culture is rooted in transparency, communication, and community. We believe these core tenets enable diversity, equity, and inclusion. Check out our current openings.

‍

Not subscribed to our NoiseLetter? Subscribe here.